CVE-2026-71275: OpenBK7231T Reflected XSS via OTA host Parameter
OpenBK7231T's httpfnotaexec() (src/httpserver/httpfns.c) reflects the host query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML encoding, allowing a crafted URL such as /otaexec?host=<script>alert(1)</script> to execute JavaScript in an authenticated admin's browser when they click a malicious link.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71275?
CVE-2026-71275 has a medium severity rating of 5.4.
What type of vulnerability is CVE-2026-71275?
CVE-2026-71275 is a reflected cross-site scripting (XSS) vulnerability.
How do I fix CVE-2026-71275?
To fix CVE-2026-71275, ensure that the 'host' parameter in the OTA request is properly sanitized and encoded before being included in HTML responses.
What software is affected by CVE-2026-71275?
CVE-2026-71275 affects the OpenBK7231T software.
What is the impact of CVE-2026-71275?
The impact of CVE-2026-71275 includes the potential execution of arbitrary JavaScript code in the context of the victim's browser.