Vulnerability Description
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.
CVSS Score
5.3
MEDIUM
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Related Weaknesses (CWE)
References
- https://github.com/openNDS/openNDS/commit/b2801d9f14af44a23be7e9a1c378623bc5947c
- https://github.com/openNDS/openNDS/commit/f2332e68c6d34f8403db346e380fff3817020d
FAQ
What is CVE-2026-38819?
CVE-2026-38819 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.
How severe is CVE-2026-38819?
CVE-2026-38819 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-38819?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.