VYPR

innbox_root

by BlackHatExploitation

CVEs (1)

  • CVE-2026-105110CriOct 8, 2026
    risk 0.64cvss 9.8epss —

    OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter.