high8.3
CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preaut…
Impact
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
Affected products
| Product | Affected versions |
|---|---|
| OpenNDS | before 11.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.