CVE-2026-75125

Name of the Vulnerable Software and Affected Versions PLANET GS-4210-16P2S versions prior to 3.441b260626

Description An authenticated null pointer dereference occurs in the '/cgi-bin/dispatcher.cgi' endpoint. The web poe alive rmtip post handler fails to verify the presence of the rmtIP parameter before dereferencing it. A remote authenticated attacker can send a crafted request omitting the rmtIP parameter, causing the CGI process to crash and resulting in a denial of service of the web management interface.

Recommendations Update to version 3.441b260626 or later. Avoid using the rmtIP parameter in the '/cgi-bin/dispatcher.cgi' endpoint until the update is applied.