Netis

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 5
    Known Exploited: 1
    0
    Critical Level Threats
    4
    High Level Threats
    0
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-112360

    Netis EAP930 CGI Endpoint debug return200 backdoor

    Last Modified: Oct 20, 2026
    Published: Oct 19, 2026

    CVE-2026-108898

    Netis WF2409E Wireless Settings cross site scripting

    Last Modified: Oct 12, 2026
    Published: Oct 12, 2026

    CVE-2026-36539

    Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi passwords, PPPoE credentials, DDNS credentials, and a full map of all connected devices.

    Last Modified: May 30, 2026
    Published: May 27, 2026

    CVE-2026-36538

    Hard-coded root credential in Netis AC1200 Router firmware

    Last Modified: May 30, 2026
    Published: May 27, 2026

    CVE-2026-36540

    Unauthenticated Command Injection via skk_set.cgi in Netis AC1200 Router NC21

    Last Modified: May 30, 2026
    Published: May 27, 2026
    Items Per Page