EIP-2026-101865

PRE-CVE

Netgear DGN2200v1 - Remote Command Execution (RCE) (Unauthenticated)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101865. PoCs published by SivertPL.

AI-analyzed exploit summary This Python script exploits an unauthenticated remote command execution vulnerability in Netgear DGN2200v1 routers by injecting a command into the 'host_name' parameter of the 'dnslookup.cgi' endpoint, which spawns a telnet backdoor. The exploit is functional and demonstrates the vulnerability by opening a reverse shell.

Description

Netgear DGN2200v1 - Remote Command Execution (RCE) (Unauthenticated)

Exploits (1)

exploitdb WORKING POC
by SivertPL · pythonwebappshardware
https://www.exploit-db.com/exploits/50099

This Python script exploits an unauthenticated remote command execution vulnerability in Netgear DGN2200v1 routers by injecting a command into the 'host_name' parameter of the 'dnslookup.cgi' endpoint, which spawns a telnet backdoor. The exploit is functional and demonstrates the vulnerability by opening a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Netgear DGN2200v1 (versions prior to v1.0.0.60)
No auth needed
Prerequisites: Network access to the target router · Python 2.7 environment
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026