Skip to main content

openNDS EUVDEUVD-2026-67359

| CVE-2026-38819 MEDIUM
Memory Leak (CWE-401)
2026-08-28 mitre GHSA-53cw-ggrv-83hg
Information Disclosure Opennds
5.3
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
5.3 MEDIUM
AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
6.5 MEDIUM

AC:L because repeated unauthenticated requests trivially exhaust memory within minutes per description; no timing or race condition described.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch available
Aug 28, 2026 - 04:16 EUVD
Source Code Evidence Fetched
Aug 28, 2026 - 02:27 vuln.today
Analysis Generated
Aug 28, 2026 - 02:27 vuln.today

DescriptionCVE.org

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

AnalysisAI

Memory exhaustion vulnerabilities in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to crash the portal daemon within minutes by triggering unfreed heap allocations in the authentication handler. The root cause is CWE-401 (missing memory release) in src/auth.c, where intermediate buffers allocated during gateway interface lookups in client_auth() are never freed on certain code paths. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must have network adjacency to the captive portal segment served by openNDS - in practice, this means connecting to the associated WiFi access point, which is typically open or trivially accessible in public hotspot deployments. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The provided CVSS 5.3 vector AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H correctly captures the availability-only, adjacent-network nature of this flaw but the AC:H rating appears conservative given that the CVE description states exhaustion occurs within minutes with no described timing or race condition prerequisite. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade to openNDS 11.0.0 or later, which incorporates the fixes from commits f2332e68c6d34f8403db346e380fff3817020d5c and b2801d9f14af44a23be7e9a1c378623bc5947c4c in the openNDS GitHub repository (https://github.com/openNDS/openNDS). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Opennds

View all
CVE-2023-41101 CRITICAL
9.8 Nov 17

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. Rated critical severity (CVSS 9.8), this
CVE-2023-38316 CRITICAL
9.8 Nov 17

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Rated critical severity (CVSS 9.8), this vulner
CVE-2024-25763 MEDIUM POC
5.5 Feb 26

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. Rated medium severity (CVSS 5.5), this vulnerabi
CVE-2026-38820 HIGH
8.3 Aug 28

Unauthenticated OS command injection in openNDS before 11.0.0 allows any adjacent-network attacker - such as an unprivil
CVE-2026-38822 HIGH
7.6 Aug 28

OS command injection in openNDS before 11.0.0 allows an authenticated captive portal user to execute arbitrary shell com
CVE-2023-41102 HIGH
7.5 Nov 17

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. Rated high severity (CVSS 7.5), this vul
CVE-2023-38322 HIGH
7.5 Nov 17

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Rated high severity (CVSS 7.5), this vulnerabil
CVE-2023-38320 HIGH
7.5 Nov 17

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Rated high severity (CVSS 7.5), this vulnerabil
CVE-2023-38315 HIGH
7.5 Nov 17

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Rated high severity (CVSS 7.5), this vulnerabil
CVE-2023-38313 HIGH
7.5 Nov 17

An issue was discovered in OpenNDS Captive Portal before 10.1.2. Rated high severity (CVSS 7.5), this vulnerability is r
CVE-2026-38821 HIGH
7.1 Aug 28

Heap-based buffer overflow in openNDS before 11.0.0 allows an unauthenticated attacker positioned on the captive portal

CVE-2023-38314 MEDIUM
6.5 Nov 17

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Rated medium severity (CVSS 6.5), this vulnerab

Same weakness CWE-401 – Memory Leak

View all
CVE-2020-13934 HIGH
7.5
CVE-2016-4232 HIGH POC
7.5
CVE-2024-25450 HIGH POC
8.8
CVE-2023-33718 HIGH POC
8.8
CVE-2019-6128 HIGH POC
8.8
CVE-2026-67183 HIGH POC
8.7
CVE-2023-34451 HIGH POC
8.2
CVE-2023-41484 HIGH POC
8.1

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-67359 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy