CVE-2026-38820 | OpenNDS 10.1.2/10.1.3/10.2.0 libopennds.sh fas os command injection

August 28, 2026 Yanac

A vulnerability, which was classified as very critical, was found in OpenNDS 10.1.2/10.1.3/10.2.0. The affected element is an unknown function of the file libopennds.sh. The manipulation of the argument fas results in os command injection.

This vulnerability was named CVE-2026-38820. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More