CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

Scoring

Severity

MEDIUM

CVSS base score

5.3

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.18%

CWE

CWE-401

Published

2026-08-28

Last modified

2026-08-28

Affected products

• openNDS openNDS

Weakness type

• CWE-401

Related vulnerabilities

• CVE-2026-69781 — Windows DHCP Client Denial of Service Vulnerability
• CVE-2026-69809 — Windows Active Directory Domain Services Denial of Service Vulnerability
• CVE-2026-69497 — Windows DHCP Server Denial of Service Vulnerability
• CVE-2026-69405 — Windows DHCP Server Denial of Service Vulnerability
• CVE-2026-70065 — Windows DHCP Server Denial of Service Vulnerability
• CVE-2026-69588 — Windows TCP/IP Denial of Service Vulnerability
• CVE-2026-16028 — Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
• CVE-2026-18313 — rpcapd memory leak in libpcap before 1.10.7

Markdown version · Browse all CVEs