https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:10:25.080456+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-36539 fkie_cve-2026-36539 2026-10-03T20:10:26.240936+00:00

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi passwords, PPPoE credentials, DDNS credentials, and a full map of all connected devices.

 https://vulnerability.circl.lu/vuln/ghsa-qj5w-m4qh-7h99 GHSA-qj5w-m4qh-7h99 2026-10-03T20:10:26.241025+00:00

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi passwords, PPPoE credentials, DDNS credentials, and a full map of all connected devices.