CVE-2026-38819

—

CVSS 3.1

5.3 medium

EPSS

<1%p7

Published

Aug 28, 2026 (19d ago)

Modified

Sep 9, 2026

Description

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

Weakness: CWE-401
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.