CVE-2026-112360

Received Received - Intake

Netis EAP930 Backdoor via CGI Debug Endpoint

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-19

Last Modified

2026-10-19

Generated

2026-10-20

AI Q&A

2026-10-20

EPSS Evaluated

N/A

NVD

CVE-2026-112360

Affected Vendors & Products

Vendor	Product	Version / Range
Netis	EAP930	1.250905.115454

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-912	The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

Attack-Flow Graph

Executive Summary

This vulnerability is a backdoor in the Netis EAP930 device version 1.250905.115454. It exists in the CGI endpoint at /cgi-bin/debug due to improper validation of the SIGNATURE argument in the return200 function. An attacker can remotely exploit this to gain unauthorized access with high privileges.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized access via the /cgi-bin/debug endpoint with a SIGNATURE argument. Monitor network traffic for unusual CGI requests to this path. Inspect system logs for suspicious activity related to the Netis EAP930 device.

Impact Analysis

If exploited, this backdoor allows attackers to remotely control the device, steal sensitive data, or use it as a pivot point for further network attacks. The high CVSS scores indicate severe confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability likely violates compliance requirements under GDPR and HIPAA due to unauthorized access risks, potential data breaches, and lack of proper security controls. Organizations using affected devices must address it to maintain compliance.

Mitigation Strategies

Immediately restrict access to the /cgi-bin/debug endpoint on the Netis EAP930 device. Disable remote CGI access if not required. Update firmware if a patch becomes available. Isolate the device from critical network segments until mitigation is confirmed.

Hi! I’m here to help you understand CVE-2026-112360. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70