{"id":"CVE-2026-112360","title":"Netis EAP930 CGI Endpoint debug return200 backdoor","summary":"A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor.…","severity":"high","cvss":8,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-912"],"vendor":"Netis","product":"EAP930","affected":["EAP930 1.250905.115454"],"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T21:30:19.739Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112360","references":[{"url":"https://vuldb.com/vuln/422394","label":"VDB-422394 | Netis EAP930 CGI Endpoint debug return200 backdoor"},{"url":"https://vuldb.com/vuln/422394/cti","label":"VDB-422394 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-112360","label":"CVE-2026-112360 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/990050","label":"Submit #990050 | Netis Systems (Netcore Group) EAP930 (AX3000 Wireless Gigabit Ceiling Mount Access Point) V0.1.250905.115454  (CWE-912, CWE-798-adjacentm CWE-256/522)"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T21:43:56.115Z","slug":"CVE-2026-112360","body":"## Overview\n\nA security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.\n\n## Affected\n\n- `EAP930 1.250905.115454`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":44,"depthScoreParts":{"impact":44,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}