VULNERABILITY INTELLIGENCE
CVE-2026-36538
CVSS score7.3 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-05-27
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-798