Netis-systems Wf2780 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netis-systems Wf2780 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-26747 — CVSS 9.8 (critical): Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code…
• CVE-2024-25850 — CVSS 9.8 (critical): Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter
• CVE-2024-25851 — CVSS 8.0 (high): Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of…
• CVE-2025-50635 — CVSS 7.5 (high): A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function…