Known Vulnerabilities for Captive Portal by Opennds
Listed below are 1 of the newest known vulnerabilities associated with "Captive Portal" by "Opennds".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58652 json | luci-app-travelmate (and the travelmate package) contain a privilege-escalation flaw: a LuCI/rpcd session holding the luci-ap... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-41017 json | Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-26213 json | thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerabili... | Not Provided | 2026-03-26 | 2026-07-14 |
| CVE-2026-25622 json | A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generat... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-25620 json | An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threa... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-8480 json | A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-0300 json | A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PA... | Not Provided | 2026-05-06 | 2026-05-12 |
| CVE-2026-0279 json | Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalPro... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2025-62826 json | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerabilit... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2023-38324 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.3 - MEDIUM | 2023-11-17 | 2024-01-26 |