Vulnerabilities

TI-2026-53917 CVE-2026-77218 · GHSA-qx7g-cv57-953h

PLANET GS-4210-16P2S V3 Stack Buffer Overflow via dispatcher.cgi Credential Handlers

LOW 31

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00572 Published 2026-08-28 Fixed in 3.441b260626 CWE-121

TI-2026-53916 CVE-2026-77217 · GHSA-m873-gx73-4mvm

PLANET GS-4210-16P2S V3 Stack Buffer Overflow and NULL Pointer Dereference via dispatcher.cgi RADIUS Handlers

LOW 31

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00602 Published 2026-08-28 Fixed in 3.441b260626 CWE-121

TI-2026-52784 CVE-2026-75126 · GHSA-r4jg-62xg-rrfv

PLANET GS-4210-16P2S V3 Stack Buffer Overflow via dispatcher.cgi Standard Handlers

LOW 31

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00602 Published 2026-08-28 Fixed in 3.441b260626 CWE-121

TI-2026-52783 CVE-2026-75125 · GHSA-rmw4-p4vg-g29j

PLANET GS-4210-16P2S V3 Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post

LOW 31

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00556 Published 2026-08-28 Fixed in 3.441b260626 CWE-476

TI-2026-52782 CVE-2026-75124 · GHSA-fx37-w2g6-gg44

PLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParam

MEDIUM 45

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string w…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00707 Published 2026-08-28 Fixed in 3.441b260626 CWE-120

TI-2026-52781 CVE-2026-75123 · GHSA-x4x6-gfv8-643f

PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post

MEDIUM 42

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01462 Published 2026-08-28 Fixed in 3.441b260626 CWE-78

TI-2026-52780 CVE-2026-75122 · GHSA-mw79-c3fw-fm35

PLANET GS-4210-16P2S V3 Command Injection via httpuploadcert.cgi

MEDIUM 41

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00936 Published 2026-08-28 Fixed in 3.441b260626 CWE-78

TI-2026-52779 CVE-2026-75121 · GHSA-68x8-vj3q-q9cg

PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_post

MEDIUM 42

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01462 Published 2026-08-28 Fixed in 3.441b260626 CWE-78

Vulnerabilities

Filters