CVE-2026-36539

High

Published: 27/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Netis AC1200 Router NC21 version V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials and passwords.

Risk Assessment

The lack of authentication for accessing the router configuration poses a serious security risk, allowing attackers to easily take control of the device and access sensitive information.

Recommendation

It is recommended to immediately update the router firmware to the latest version and configure appropriate security measures to restrict access to the CGI endpoint.

Original NVD description (English source)

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi passwords, PPPoE credentials, DDNS credentials, and a full map of all connected devices.