CVE-2026-75122

Received Received - Intake

Authenticated OS Command Injection in PLANET GS-4210-16P2S Firmware

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: VulnCheck

Description

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote attacker with administrator web credentials can submit a crafted certificate upload request to execute arbitrary operating-system commands on the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-28

Generated

2026-08-29

AI Q&A

2026-08-29

EPSS Evaluated

N/A

NVD

CVE-2026-75122

EUVD

EUVD-2026-67782

Affected Vendors & Products

Vendor	Product	Version / Range
planet	gs-4210-16p2s	to 3.441b260626 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an authenticated OS command injection flaw in PLANET GS-4210-16P2S firmware versions before 3.441b260626. It exists in the /cgi-bin/httpuploadcert.cgi endpoint where the certificate password field is used in a shell command without proper sanitization of special characters. An attacker with admin web credentials can exploit this by uploading a malicious certificate to execute arbitrary operating system commands on the device.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of the PLANET GS-4210-16P2S device. If the firmware is before version 3.441b260626, the device is vulnerable. Log in to the device's web interface or use CLI commands to check the firmware version.

Impact Analysis

An attacker could gain full control over the affected network device, allowing them to manipulate its operations, intercept traffic, or use it as a foothold to move laterally within the network. This could lead to data breaches, service disruption, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations by enabling unauthorized access to personal or sensitive data. Organizations may face legal penalties, reputational damage, and loss of trust due to potential data breaches resulting from this flaw.

Mitigation Strategies

Immediately update the firmware to version 3.441b260626 or later. Ensure no unauthorized users have administrator credentials. Monitor network traffic for unusual certificate upload requests or shell command execution attempts.

Hi! I’m here to help you understand CVE-2026-75122. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70