https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:23:17.923928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349666 EUVD-2026-349666 2026-10-06T17:23:17.926961+00:00 EUVD-2026-349666 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71274 fkie_cve-2026-71274 2026-10-06T17:23:17.926995+00:00

OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/http_fns.c with no HTML encoding.

 https://cve.radiocsirt.org/vuln/ghsa-9c86-c5c2-55cr GHSA-9c86-c5c2-55cr 2026-10-06T17:23:17.927027+00:00

OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup() with no HTML sanitization. CHANNEL_GetLabel() returns these labels unsanitized, and they are rendered via hprintf255() at 15+ locations in src/httpserver/http_fns.c with no HTML encoding. An attacker with MQTT broker access (commonly unauthenticated in real deployments) can set a channel label containing a <script> payload that executes when any user views the device's web panel.