CVE-2026-112360: Backdoor in Netis EAP930

This vulnerability affects the Netis EAP930 device running firmware version 1.250905.115454. The flaw exists in the CGI endpoint /cgi-bin/debug, specifically in the return200 function. Manipulating the SIGNATURE argument leads to a backdoor condition, potentially allowing unauthorized access or control. The attack vector is remote network access, but exploitation requires high privileges and complexity. The vendor was notified but did not provide any response or remediation details. No known exploits are reported in the wild.

Successful exploitation could allow an attacker to leverage a backdoor on the affected device, potentially leading to unauthorized access or control. However, the attack complexity is high, and it requires elevated privileges, reducing the likelihood of widespread exploitation. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor official Netis channels for updates. Until a fix is available, restricting access to the /cgi-bin/debug endpoint and limiting administrative privileges may reduce risk.