{"id":"CVE-2026-96515","revision":"bf4549885ef54b269909b5c6cb65152e","records":[{"revision":"bf4549885ef54b269909b5c6cb65152e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-96515","aliases":[],"title":"Command Injection Vulnerability in Netlink ICT HG323RW Router","description":"This\nvulnerability exists in the Netlink ICT HG323RW router due to insufficient\nauthorization and input validation controls in the diagnostic script import\nfunctionality. An authenticated attacker could exploit this vulnerability by\nuploading and executing a specially crafted script through the web management\ninterface.\n\n\n\n\n\nSuccessful exploitation of this vulnerability\ncould allow the attacker to execute arbitrary operating system commands with\nroot privileges resulting in complete compromise of the affected device.","state":0,"publishedAt":"2026-09-24T11:59:40.882+00:00","modifiedAt":"2026-10-12T11:53:15.899+00:00","affected":[{"ecosystem":"Vendor product","name":"Netlink ICT HG323RW Router","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Netlink ICT Pvt Ltd\",\n                    \"product\": \"Netlink ICT HG323RW Router\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"Hardware Version (V3.7) and Affected Firmware (3.1.02-260228 Netlinkver)\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.6,"severity":"HIGH"}],"references":["https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0473"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96515","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-96515","identifiers":["CVE-2026-96515"]},"retained":false,"historicalAffected":[]}],"coverage":[]}