Cross Site Scripting Vulnerability in Netis WF2409E Wireless Settings

CVE-2026-108898

What is CVE-2026-108898?

A vulnerability has been identified in the Netis WF2409E device, specifically within the Wireless Settings component. This flaw allows an attacker to manipulate the SSID argument, leading to cross site scripting attacks. Such attacks can be executed remotely, making the device particularly susceptible to exploitation. Although the vendor was notified about this issue early on, there has been no response. The potential for public exploitation raises significant concerns for user security and device integrity. Users are advised to take precautionary measures until a fix is made available.

References