Advisories · Technology

openshwprojects OpenBK7231T_App.

Every CVE that names openshwprojects OpenBK7231T_App among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-71275 CVE record

CVSS 5.4 Medium

OpenBK7231T - Reflected XSS via OTA host Parameter
- openshwprojects OpenBK7231T_App
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2026
CVE-2026-71274 CVE record

CVSS 8.5 High

OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels
- openshwprojects OpenBK7231T_App
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2026
CVE-2026-71273 CVE record

CVSS 6.5 Medium

OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack
- openshwprojects OpenBK7231T_App
- Cross-site request forgery (CSRF)
Not analysed yet 5 Aug 2026