{"vulnerability": "CVE-2026-105110", "sightings": [{"uuid": "acd492b1-45ef-4811-844a-90f641b47f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxe7msct3e2l", "content": "\ud83d\udea8 CVE-2026-105110 \u2014 CVSS 9.3 CRITICAL\n\nOS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105110\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T10:07:18.151219Z"}, {"uuid": "b0b455f8-8378-4ba9-bc3a-e02a49a01459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxebzc2vfh2z", "content": "CVE-2026-105110 - innbox\nThe login page on Iskratel Innbox GPON devices can be tricked into running any command without needing to log in. This lets an outsider gain full control of the device. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#innbox #iskratel #CVE #infosec", "creation_timestamp": "2026-10-08T10:50:04.686360Z"}, {"uuid": "70ec86a1-7df2-4979-8bae-515c0e80c9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117405176710830698", "content": "CVE-2026-105110 (CRITICAL, CVSS 9.8): Iskratel Innbox GPON ONT devices have an OS command injection flaw in login.xgi. Remote, unauthenticated code execution as root possible. Restrict access & monitor until patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-2e83a9c5703badaa #OffSeq #infosec #zeroday #vuln", "creation_timestamp": "2026-10-08T12:00:27.049978Z"}, {"uuid": "f5421494-18fd-498a-a070-7efac1134784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxefx67qvd2x", "content": "Iskratel Innbox GPON ONT: CVE-2026-105110 (CRITICAL, 9.8 CVSS) enables unauthenticated remote OS command injection as root. Restrict access, monitor login.xgi, await patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-...", "creation_timestamp": "2026-10-08T12:00:29.059741Z"}]}