Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: openshwprojects Clear all filters
TI-2026-49942 CVE-2026-71275 · GHSA-2qcv-j8w9-9r25

OpenBK7231T - Reflected XSS via OTA host Parameter

Priority LOW 24

OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML encoding, allow…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-08-05 No fix listed CWE-79
TI-2026-49941 CVE-2026-71274 · GHSA-9c86-c5c2-55cr

OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

Priority LOW 39

OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization.

CVSS 3.1HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00281 Published 2026-08-05 No fix listed CWE-79