CVE-2026-112360
8.0HighPublished 19 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-912
Impact
Authenticated remote attackers with high privileges can trigger an unintended backdoor to gain full compromise over the device. They need high-privilege network access to the device's web management interface.
Root cause
The return200 function in /cgi-bin/debug mishandles the SIGNATURE parameter, exposing hidden backdoor functionality.
Affected systems
Netis EAP930 version 1.250905.115454.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Fix & remediation
No vendor patch is available; restrict network access to the web management interface or block requests to /cgi-bin/debug at your network firewall.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.