CVE-2026-105110 — Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CL…
Published: 2026-10-08 · CVSS: 9.3 · CVSS 4.0
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7