Iskratel - Innbox - CRITICAL - CVE-2026-105110. An OS Command Injection vulnerability exists in the login.xgi CGI endpoint of Iskratel Innbox GPON ONT devices, allowing unauthorized remote attackers to execute arbitrary commands with root privileges using specific parameters. This security flaw poses a significant risk as it can lead to unauthorized access and control over affected systems. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io