Vulnerability · Published Aug 28, 2026 · Assigned by VulnCheck

CVE-2026-77218PLANET GS-4210-16P2S V3 Stack Buffer Overflow via dispatcher.cgi Credential Handlers

Medium 4.9

In plain English

A medium-severity stack buffer overflow in PLANET GS-4210-16P2S V3 from PLANET Technology Corp.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)0.6%top 52.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the web_sys_enablePasswd_post handler copies the enbPass POST parameter into a fixed-size stack buffer without length validation, and the web_sys_localUser_post handler copies the usrName and usrPass POST parameters into fixed-size stack buffers without length validation. A remote authenticated attacker can send a crafted request to crash the CGI process or web management service, resulting in denial of service.

Affected products (as reported)

Vendor	Product	Versions
PLANET Technology Corp.	PLANET GS-4210-16P2S V3	0 – before 3.441b260626

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References

Vendor Advisory vendor-advisory, patch
https://www.vulncheck.com/advisories/planet-gs-4210-16p2s-stack-buffer-overflow-via-dispatcher-cgi-credential-handlers third-party-advisory