CVE-2021-26747: Netis-Systems WF2411 Firmware

Critical severity, CVSS 9.8. EPSS: 54.8% chance of exploitation in the next 30 days.

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.

Affected products

• Netis-Systems WF2411 Firmware: version 1.1.29629 only
• Netis-Systems WF2780 Firmware: version 2.3.40404 only

Published 2021-02-18. Last modified 2026-06-17.