CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command...
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
CVE-2026-38820- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2026-67360
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
EUVD-2026-67360- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hw32-3v67-92pf
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command...
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
GHSA-hw32-3v67-92pf- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
NVD
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
CVE-2026-38820- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
OSV
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
CVE-2026-38820- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
DEBIAN-CVE-2026-38820- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.
- Record
UBUNTU-CVE-2026-38820- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openndsDebian:12 |
All versions, plus listed versions 10.2.0+dfsg-110.3.0+dfsg-0.110.3.1+dfsg-19.10.0-1 |
None known |
openndsDebian:13 |
All versions, plus listed versions 10.3.1+dfsg-1 |
None known |
openndsUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 9.10.0-110.2.0+dfsg-110.2.0+dfsg-1build110.2.0+dfsg-1build210.2.0+dfsg-1ubuntu0.24.04.1~esm1 |
None known |
openndsUbuntu:26.10 |
All versions, plus listed versions 10.3.1+dfsg-1build1 |
None known |
openndsUbuntu:26.04:LTS |
All versions, plus listed versions 10.3.1+dfsg-110.3.1+dfsg-1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-38820 is a high vulnerability (CVSS 8.3) in Opennds, published August 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. No source names a fixed version.
References
github.com/openNDS/openNDS/commit/8c03750d9a17d601fa7bd03ae7cde20c7c8d1252
nvd.nist.gov/vuln/detail/CVE-2026-38820
security-tracker.debian.org/tracker/CVE-2026-38820
ubuntu.com/security/CVE-2026-38820
cve.org/CVERecord?id=CVE-2026-38820