PT-2026-43705 · Undefined · Undefined

Sir3Ns · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-36538

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-36538

Affected Products

Undefined

References · 3

• 🔥 https://github.com/sir3ns/cve-disclosure/blob/main/CVE-2026-36538/readme.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-36538 · Security Note
• http://netis-system.com · Note