Buffer Overflow Vulnerabilities in PLANET GS-4210-16P2S Firmware
CVE-2026-75126

6.9MEDIUM

Key Information:

Vendor

Planet Technology Corp.

Status
Planet Gs-4210-16p2s V3
Vendor
CVE Published:
28 August 2026

What is CVE-2026-75126?

The firmware for PLANET GS-4210-16P2S contains multiple stack buffer overflow vulnerabilities resulting from improper validation of POST parameters within several CGI handlers. These vulnerabilities allow an authenticated attacker to manipulate fixed-size stack buffers, which can lead to the CGI process or web management service crashing. This scenario can ultimately result in a denial of service, compromising the operational stability of the affected device.

Affected Version(s)

PLANET GS-4210-16P2S V3 0 < 3.441b260626

References

https://www.planet.com.tw/en/support/security-advisory/10
vendor-advisorypatch
https://www.vulncheck.com/advisories/planet-gs-4210-16p2s...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jincheng Wang (@winmt)
Professor Le Yu of Nanjing University of Posts and Telecommunications
Professor Xiapu Luo of The Hong Kong Polytechnic University
.