Description


OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter.

Related CPE's


Could not find any relations

Weaknesses


309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Secondary

CWE-78CWE-306

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information


Source identifier

309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Vulnerability status

Deferred

Published

2026-10-08T09:16:40.930Z

23 hours ago

Last modified

2026-10-08T21:35:53.890Z

11 hours ago