Openshwprojects Openbk7231t_app
3 CVEs affecting Openshwprojects Openbk7231t_app. Latest disclosed: 2026-08-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71274 | High | 8.5 | 2026-08-05 | OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup() with no HTML san… |
CVE-2026-71273 | Medium | 6.5 | 2026-08-05 | OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the `web_admin_pa… |
CVE-2026-71275 | Medium | 5.4 | 2026-08-05 | OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OT… |