CVE-2026-75122 - PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote attacker with administrator web credentials can submit a crafted certificate upload request to execute arbitrary operating-system commands on the device. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-75486 [高危] CVE-2026-75486 - Synk Sweater Comb before 3.8.8 contains a command inj…
• CVE-2026-75123 [高危] CVE-2026-75123 - PLANET GS-4210-16P2S firmware before 3.441b260626 con…
• CVE-2026-75122 [高危] CVE-2026-75122 - PLANET GS-4210-16P2S firmware before 3.441b260626 con…
• CVE-2026-75121 [高危] CVE-2026-75121 - PLANET GS-4210-16P2S firmware before 3.441b260626 con…
• CVE-2026-55673 [未知] CVE-2026-55673 - PowSyBl (Power System Blocks) is a framework to build…
• CVE-2026-55378 [未知] CVE-2026-55378 - JS Recon is a JavaScript enumeration and SAST tool. F…
• CVE-2026-37751 [危急] CVE-2026-37751 - An OS command injection vulnerability in the killSess…
• CVE-2026-82082 [危急] CVE-2026-82082 - NUMail developed by Green-Computing has an OS Command…