CVE-2026-38821

openNDS / openNDS PUBLISHED

Description (CNA)

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial of service) and potentially achieve remote code execution. This is in http_microhttpd.c.

Affected (CNA)

Vendor / product	Versions
openNDS / openNDS	affected 0 before 11.0.0

CWE

CWE-122

References

https://github.com/openNDS/openNDS/commit/3b5f7ef40cd048826d3c4a16f61a73a1768fd5a9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.