CVE-2026-36538

The Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in the /etc/shadow.sample file. The root account uses the trivially weak password root , which allows an attacker with access to the device to authenticate as root. This vulnerability provides the attacker with ...

CVE-2026-36540

Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skkset.cgi endpoint. The password and newpwdconfirm POST parameters are passed directly to the underlying OS shell without sanitization. An attacker can inject arbitrary shell commands by...