openshwprojects

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

openshwprojects records in CISA KEV

No openshwprojects vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-49941 CVE-2026-71274 · GHSA-9c86-c5c2-55cr

OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

LOW 39

OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization.

CVSS 3.1HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00281 Published 2026-08-05 No fix listed CWE-79

TI-2026-49940 CVE-2026-71273 · GHSA-hxw9-fq53-ph7w

OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack

LOW 28

OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00174 Published 2026-08-05 No fix listed CWE-352

TI-2026-49942 CVE-2026-71275 · GHSA-2qcv-j8w9-9r25

OpenBK7231T - Reflected XSS via OTA host Parameter

LOW 24

OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML encoding, allow…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-08-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0