Exploitation ongoing with high activity in latest observed window (4 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin/netis.cgi of the component Diagnostic Tool Interface. Performing a manipulation of the argument IpAddr results in os command injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
CVE-2026-4840 A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin/netis.cgi of the component … https://www.cve.org/CVERecord?id=CVE-2026-4840
Post summary
A new vulnerability (CVE-2026-4840) has been identified in Netcore Power 15AX, impacting the setTools function within /bin/netis.cgi on versions up to 3.0.0.6938.
CISA warns of active exploitation of six new vulnerabilities in its catalog, including CVE-2026-4840. Attackers can execute arbitrary commands via Netcore Power 15AX Diagnostic Tool. Patch immediately to prevent system compromise. #CyberSecurity #InfoSec https://t.co/BHeWqLpVhN
Post summary
CISA reports CVE-2026-4840 is actively exploited, allowing command execution through Netcore Power 15AX Diagnostic Tool, and urges immediate patching.
[CVE-2026-4840: HIGH] Critical security flaw in Netcore Power 15AX up to 3.0.0.6938 allows for remote os command injection via manipulated IpAddr argument in /bin/netis.cgi Diagnostic Tool Interface component....#cve,CVE-2026-4840,#cybersecurity https://cvefind.com/CVE-2026-4840
Post summary
The post announces a high‑severity remote OS command injection flaw in Netcore Power 15AX up to 3.0.0.6938, detailing the vulnerable argument and providing a link for further information.
🟠 CVE-2026-4840 - High A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin/netis.cgi of the component Diagnostic Tool Interfac... https://www.thehackerwire.com/vulnerability/CVE-2026-4840/ https://t.co/65sxFw3m9j
Post summary
The tweet announces a newly discovered CVE-2026-4840 in Netcore Power, noting the affected function and file, but provides no PoC, exploit tool, or patch information.