What is GHSA-99gm-3j5p-pvr2?

GHSA-99gm-3j5p-pvr2 is a security advisory published by GitHub Security Advisories with Critical severity. OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an...

Which CVE IDs does GHSA-99gm-3j5p-pvr2 cover?

GHSA-99gm-3j5p-pvr2 covers the following CVE IDs: CVE-2026-105110. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-99gm-3j5p-pvr2?

GHSA-99gm-3j5p-pvr2 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-99gm-3j5p-pvr2CriticalCVSS 9.8

OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-105110 →

📋 Description

OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-105110
https://github.com/BlackHatExploitation/innbox_root
https://github.com/advisories/GHSA-99gm-3j5p-pvr2