CVE-2026-96515
Command Injection Vulnerability in Netlink ICT HG323RW Router
- State
- Published
- Severity
- 8.6 High
- Published
- Sep 24, 2026
- Updated
- Oct 12, 2026
- Reserved
- Sep 23, 2026
Description
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the web management interface.
Successful exploitation of this vulnerability could allow the attacker to execute arbitrary operating system commands with root privileges resulting in complete compromise of the affected device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | CERT-In |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Netlink ICT HG323RW RouterNetlink ICT Pvt Ltd |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.