CVE-2026-36538: High severity Netis AC1200 Router NC21 vulnerability
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-36538?
CVE-2026-36538 has a high severity rating of 7.3 based on the CVSS v3.1 scoring.
How do I fix CVE-2026-36538?
To fix CVE-2026-36538, change the default root password from 'root' to a strong, unique password.
What risks are associated with CVE-2026-36538?
CVE-2026-36538 allows an attacker to gain full control of the device due to hard-coded root credentials.
Which devices are affected by CVE-2026-36538?
CVE-2026-36538 affects the Netis AC1200 Router NC21 running firmware version V4.0.1.4296.
What does the hard-coded credential in CVE-2026-36538 enable?
The hard-coded credential in CVE-2026-36538 allows an attacker with device access to authenticate as root.