Description
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter.
Related CPE's
Could not find any relations
Weaknesses
309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Secondary
CWE-78CWE-306
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 · Critical
Information
Source identifier
309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Vulnerability status
Deferred
Published
2026-10-08T09:16:40.930Z
23 hours agoLast modified
2026-10-08T21:35:53.890Z
11 hours ago