Vulnerability · Published Aug 5, 2026 · Assigned by TuranSec
CVE-2026-71273OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack
Medium 6.5
In plain English
A medium-severity cross-site request forgery in OpenBK7231T_App from openshwprojects. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 93.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| openshwprojects | OpenBK7231T_App | 0 – through * |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
References
- https://github.com/openshwprojects/OpenBK7231T_App third-party-advisory
- https://github.com/openshwprojects/OpenBK7231T_App/blob/main/src/httpserver/http_fns.c third-party-advisory