Quick answers
- Is CVE-2026-75125 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-75125 being exploited in the wild.
- How severe is CVE-2026-75125?
- Medium severity, with a CVSS score of 4.9, published 28 August 2026.
- Which products and versions are affected?
- PLANET GS-4210-16P2S V3 before 3.441b260626.
- Is there a fix for CVE-2026-75125?
- A patch was published on 2026-08-28: Patched firmware version 3.441b260626 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-75125 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-75125?
- Check whether you run PLANET GS-4210-16P2S V3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A null pointer dereference vulnerability (CWE-476) exists in the web_poe_alive_rmtip_post handler within /cgi-bin/dispatcher.cgi. The handler dereferences the rmtIP POST parameter without first verifying it is present in the request. An authenticated attacker with administrator-level web-management privileges can send a POST request to the dispatcher.cgi endpoint (cmd=9223) that omits the rmtIP parameter, causing the CGI process to crash. The attack requires valid authentication credentials to reach the vulnerable code path. Successful exploitation results in denial of service of the web management interface. A patched firmware version (3.441b260626 or later) is available from PLANET.
Affected products
- PLANET GS-4210-16P2S V3 before 3.441b260626
Timeline
- 2026-08-28: disclosed
- 2026-08-28: patched: Patched firmware version 3.441b260626 available