Buffer overflow in Opennds
CVE-2026-38821
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial of service) and potentially achieve remote code execution. This is in http_microhttpd.c.
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-38821?
- CVE-2026-38821 is a high-severity vulnerability in Opennds, classified under Heap-based Buffer Overflow. CVSS score: 7.1/10. Published 2026-08-28.
- How severe is CVE-2026-38821?
- High severity. CVSS v3 base score is 7.1 out of 10.