cmd_channels.c) stores channel labels…¶

Key facts

CVE-2026-71274 is a High (8.5) vulnerability: OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels…. This entry ships a detection-only PoC and a Docker test lab.


CVE	CVE-2026-71274
Severity	High (8.5)
Detection / prevention	—
PoC	poc.py
Source	2026/CVE-2026-71274/

Details¶

English | 한국어

Description¶

OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup() with no HTML sanitization. CHANNEL_GetLabel() returns these labels unsanitized, and they are rendered via hprintf255() at 15+ locations in src/httpserver/http_fns.c with no HTML encoding. An attacker with MQTT broker access (commonly unauthenticated in real deployments) can set a channel label containing a