Which versions of PLANET GS-4210-16P2S are affected by CVE-2026-75122?

A command injection vulnerability in PLANET GS-4210-16P2S managed switches allows authenticated administrators to execute arbitrary operating system commands by uploading malicious certificates.. A patch is available.

How to fix or mitigate CVE-2026-75122?

Within 24 hours, identify all PLANET GS-4210-16P2S switches in your infrastructure and document their current firmware versions; review administrative access logs for the past 30 days for any certificate upload activity targeting the httpuploadcert endpoint. Within 7 days, obtain and apply the vendor patch to upgrade all affected devices to firmware version 3.441b260626 or later, testing first in a non-production environment. Within 30 days, verify patching completion across all deployed units, conduct a comprehensive 90-day retrospective audit of administrative actions on these devices, implement enhanced monitoring for suspicious certificate operations, and restrict administrative access to these switches through network segmentation if operationally feasible.

PLANET GS-4210-16P2S CVE-2026-75122

Q: What is the CVSS score of CVE-2026-75122?

CVE-2026-75122 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

EUVD-2026-67782 HIGH

OS Command Injection (CWE-78)

2026-08-28 VulnCheck

GHSA-mw79-c3fw-fm35

Command Injection Planet Gs 4210 16P2S

8.6

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.2 HIGH

Network-accessible but requires high-privilege admin credentials; no complexity or interaction beyond attacker actions; full CIA impact on device with no confirmed scope change to other systems.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 28, 2026 - 20:21 vuln.today

CVE Published

Aug 28, 2026 - 15:30 cve.org

HIGH 8.6

DescriptionCVE.org

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote attacker with administrator web credentials can submit a crafted certificate upload request to execute arbitrary operating-system commands on the device.

AnalysisAI

Authenticated OS command injection in PLANET GS-4210-16P2S managed switch firmware prior to 3.441b260626 enables a remote administrator to execute arbitrary commands on the device operating system via a crafted certificate upload request targeting /cgi-bin/httpuploadcert.cgi. The certificate password field is incorporated into a shell command without sanitization of shell metacharacters, a textbook CWE-78 root cause. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires valid administrator-level credentials for the GS-4210-16P2S web management interface, as confirmed by PR:H in the CVSS 4.0 vector - attackers without admin access cannot exploit this vulnerability directly. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 score of 8.6 with PR:H correctly captures that administrator credentials are a hard prerequisite, meaningfully reducing the population of potential exploiters relative to unauthenticated vulnerabilities. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade PLANET GS-4210-16P2S firmware to version 3.441b260626 or later, available via the vendor security advisory at https://www.planet.com.tw/en/support/security-advisory/10. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all PLANET GS-4210-16P2S switches in your infrastructure and document their current firmware versions; review administrative access logs for the past 30 days for any certificate upload activity targeting the httpuploadcert endpoint. …

Threat intelligence, references, and detailed analysis are available after sign-in.