CVE-2026-36538CWE-798hardcoded-credentials

CVE-2026-36538

High · published May 27, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-05-27T18:16Z
References (2)
https://github.com/sir3ns/cve-disclosure/blob/main/CVE-2026-36538/readme.md · [email protected]https://github.com/sir3ns/cve-disclosure/blob/main/CVE-2026-36538/readme.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 27 MAY 00:00Z
    Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample
    cvelistv5