Quick answers
- Is CVE-2026-75122 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-75122 being exploited in the wild.
- How severe is CVE-2026-75122?
- High severity, with a CVSS score of 7.2, published 28 August 2026.
- Which products and versions are affected?
- PLANET GS-4210-16P2S V3 before 3.441b260626.
- Is there a fix for CVE-2026-75122?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-75122 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-75122?
- Check whether you run PLANET GS-4210-16P2S V3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is an authenticated OS command injection vulnerability (CWE-78) in the /cgi-bin/httpuploadcert.cgi endpoint. The certificate password field provided during certificate upload requests is incorporated directly into shell commands without sanitization of shell metacharacters, allowing command injection. An attacker with administrator-level web credentials can craft a malicious certificate upload request with shell metacharacters in the password field to execute arbitrary OS commands on the device. The vulnerability requires prior authentication as an administrator and network access to the web management interface. Patched firmware version 3.441b260626 and later address this issue.
Affected products
- PLANET GS-4210-16P2S V3 before 3.441b260626
Timeline
- 2026-08-28: disclosed