https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:56:46.465843+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-161469 EUVD-2026-161469 2026-10-07T09:56:46.562931+00:00 EUVD-2026-161469 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38316 fkie_cve-2023-38316 2026-10-07T09:56:46.562989+00:00

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-857f-w8mj-5g2g GHSA-857f-w8mj-5g2g 2026-10-07T09:56:46.563047+00:00

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests.

 https://cve.radiocsirt.org/vuln/gsd-2023-38316 gsd-2023-38316 2026-10-07T09:56:46.563074+00:00 gsd-2023-38316 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-38316 Withdrawn: UBUNTU-CVE-2023-38316 2026-10-07T09:56:46.563092+00:00

Withdrawn by the publisher.

Affected: Ubuntu:24.10: opennds, Ubuntu:24.04:LTS: opennds

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.