CVE-2026-38819: Missing Release of Memory after Effective Lifetime

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...