cvedb.io
CVE-2026-36538
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2026-05-27T14:16:45.403 · Last modified 2026-06-17T10:41:08.250

Summary

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.