CVE-2026-71274

OpenBK7231T is affected by CVE-2026-71274 due to CHANNEL_SetLabel() storing labels from MQTT SetChannelLabel without HTML sanitization, and CHANNEL_GetLabel() returning unsanitized values. These labels are rendered via hprintf255() in the web panel at 15+ locations with no HTML encoding, enabling...