EIP-2026-101929

PRE-CVE

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101929. PoCs published by Karn Ganeshen.

AI-analyzed exploit summary This writeup details multiple vulnerabilities in the PROLiNK H5004NK ADSL Wireless Modem, including default weak credentials, backdoor accounts, lack of CSRF protection, weak RBAC controls, and sensitive information exposure. It provides technical details and HTTP request examples for exploitation.

Description

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP
by Karn Ganeshen · textwebappshardware
https://www.exploit-db.com/exploits/38471

This writeup details multiple vulnerabilities in the PROLiNK H5004NK ADSL Wireless Modem, including default weak credentials, backdoor accounts, lack of CSRF protection, weak RBAC controls, and sensitive information exposure. It provides technical details and HTTP request examples for exploitation.

Classification
Writeup 90%
Attack Type
Auth Bypass | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PROLiNK H5004NK ADSL Wireless Modem Firmware version R76S Slt 4WNE1 6.1R
No auth needed
Prerequisites: network access to the device · knowledge of default credentials or backdoor accounts
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026