NX10 vulnerabilities

2 known vulnerabilities in NX10 from Netis-systems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  NX10: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-61517Sep 8, 2026Netis-systemsEPSS 2.51%

  Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parame

• 9.8 Critical severity

  NX10: Insufficiently Protected Credentials

  CVE-2026-61516Sep 8, 2026Netis-systems

  Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a va