CVE-2026-45431highCWE-78

CVE-2026-45431: fallo de gravedad alta en GX Earth 1010

Command Injection Vulnerability in GX Earth ONT Models

Publicada el

Seguir esta CVE+ Monitorear GX Earth

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%
This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
GX INDIA · GX Earth 1010GX INDIA · GX Earth 2022
CVEs relacionadas — GX Earth 1010

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-45433HIGHHardcoded Cryptographic Key Vulnerability in GX Earth ONT ModelsEPSS 0.3%CVE-2026-45432HIGHCleartext Transmission of Credentials Vulnerability in GX Earth ONT ModelsEPSS 0.2%