Vulnerability · Published Jun 4, 2026 · Assigned by CERT-In
CVE-2026-45432Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
High 8.7
In plain English
A high-severity security flaw in GX Earth 1010 from GX INDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.2%top 84.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GX INDIA | GX Earth 2022 | version E2022 - 3.1.2Aversion E2022 - 3.1.5AVversion E2022 - 1.1ASL |
| GX INDIA | GX Earth 1010 | version E1010-1.1ASL |
Weakness: CWE-319 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0288 third-party-advisory