CVE-2026-45431highCWE-78

CVE-2026-45431: high-severity vulnerability in GX Earth 1010

Command Injection Vulnerability in GX Earth ONT Models

Published

Follow this CVE+ Monitor GX Earth

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.4%
This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
GX INDIA · GX Earth 1010GX INDIA · GX Earth 2022
Related CVEs — GX Earth 1010

In the same product, most dangerous first.

CVE-2026-45433HIGHHardcoded Cryptographic Key Vulnerability in GX Earth ONT ModelsEPSS 0.3%CVE-2026-45432HIGHCleartext Transmission of Credentials Vulnerability in GX Earth ONT ModelsEPSS 0.2%