Medium severity6.5NVD Advisory· Published Aug 5, 2026· Updated Aug 26, 2026
CVE-2026-71273
CVE-2026-71273
Description
OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.