What’s Vulnerable › Vulnerabilities
CVE-2026-45432: Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
- Severity: high (CVSS 8.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-04 · updated 2026-07-22
- Weakness: CWE-319
Description
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.
Affected products
- GX INDIA GX Earth 1010: version E1010-1.1ASL
- GX INDIA GX Earth 2022: from version E2022 through 3.1.2A; from version E2022 through 3.1.5AV; from version E2022 through 1.1ASL
References
Get alerted when CVE-2026-45432 or the next vulnerability affects your stack