Netis

Products

ProductCVEsExploitedLatest
WF-24044–Mar 28, 2025
Netcore Router2–Jan 7, 2023
Router firmware1–Jul 16, 2025
EAP9301–Oct 19, 2026
WF2409E1–Oct 12, 2026
WF24191–Aug 18, 2025
WF27801–Feb 24, 2025

Exploited and recent CVEs

  • CVE-2026-112360 High 8.0 Netis EAP930 CGI Endpoint debug return200 backdoor 0.5%
  • CVE-2026-108898 Low 3.5 Netis WF2409E Wireless Settings cross site scripting 0.2%
  • CVE-2025-9119 Low 2.4 Netis WF2419 Wireless Settings index.htm cross site scripting 0.3%
  • CVE-2025-34117 Critical 9.3 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor 20.8%
  • CVE-2025-2922 Low 2.0 Netis WF-2404 BusyBox Shell cleartext storage 0.1%
  • CVE-2025-2921 Medium 6.4 Netis WF-2404 passwd default password 0.4%
  • CVE-2025-2920 Low 2.0 Netis WF-2404 passwd weak hash 0.1%
  • CVE-2025-2919 Medium 6.8 Netis WF-2404 UART hardware allows activation of test or debug logic at runtime 0.4%
  • CVE-2025-1617 Low 2.4 Netis WF2780 Wireless 2.4G Menu cross site scripting 0.3%
  • CVE-2023-0114 Low 3.3 Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk 0.1%
  • CVE-2023-0113 Medium 5.3 Netis Netcore Router Backup param.file.tgz information disclosure 0.8%