Security Vulnerability in Netis EAP930 Access Point

CVE-2026-112360

What is CVE-2026-112360?

A security flaw in Netis EAP930 version 1.250905.115454 allows attackers to exploit the CGI Endpoint's return200 function. By manipulating the SIGNATURE argument, an unauthorized backdoor can be created, facilitating remote attacks. The complexity of carrying out this attack is assessed to be high, making it a significant concern for device security. Despite early disclosure efforts, the vendor has not provided any response to this critical security issue.

References