PatchSiren

Iskratel CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Iskratel CVE published 2026-10-08

CVE-2026-105110

CVE-2026-105110 is a critical OS command injection vulnerability in the login.xgi CGI endpoint of Iskratel Innbox GPON ONT devices, allowing unauthenticated remote code execution as root. Defenders should prioritize verification and remediation due to the high CVSS score and potential for significant impact. The vulnerability is confirmed by official CVE Program and NVD records. Affected product deploymen [truncated]