CVE-2026-38822 | openNDS up to 10.x Client Status Page client_params.sh os command injection

A vulnerability was found in openNDS up to 10.x. It has been rated as very critical. This vulnerability affects unknown code of the file client_params.sh of the component Client Status Page. This manipulation causes os command injection.

This vulnerability is tracked as CVE-2026-38822. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More