CRITICAL
Iskratel
CVE published 2026-10-08
CVE-2026-105110
CVE-2026-105110 is a critical OS command injection vulnerability in the login.xgi CGI endpoint of Iskratel Innbox GPON ONT devices, allowing unauthenticated remote code execution as root. Defenders should prioritize verification and remediation due to the high CVSS score and potential for significant impact. The vulnerability is confirmed by official CVE Program and NVD records. Affected product deploymen [truncated]