Skip to content
Threat Feed
Subscribe

Vendor

Netcore

8 briefs RSS
low advisory

Netcore NBR100V2: Integer overflow in msg_aes_dec (CVE-2026-121382)

An integer overflow vulnerability exists in the msg_aes_dec function of the /usr/bin/auto_ac file in Netcore NBR100V2 version 1.3.240614.030928, allowing for remote exploitation.

NBR100V2
1c
critical advisory

Pre-Authentication Stack Overflow in Netcore NR256CN Routers

Netcore NR256CN routers up to version 1.5.140116 are vulnerable to a pre-authentication stack buffer overflow in the Boa web server's user_ok() function, allowing remote code execution or denial-of-service.

NR256CN cve-2026-111711 vulnerability network-device remote-code-execution denial-of-service network-infrastructure
2t 1c
critical advisory

Authentication Bypass in Netcore NR268

The user_ok function in the Netcore NR268 CGI execution component contains an authentication bypass vulnerability, CVE-2026-108907, which allows remote attackers to gain unauthorized access.

NR268 cve-2026-108907 authentication-bypass remote-code-execution network-security cve-2026-108906 web-vulnerability cve embedded-device
1r 2t 1c
critical advisory

OS Command Injection in Netcore NAP930 via Network Tools CGI

An unauthenticated remote OS command injection vulnerability in the Netcore NAP930 router allows attackers to execute arbitrary system commands via the sid argument in the network_tools CGI component.

NAP930 vulnerability remote-code-execution network-device
1r 2t 1c
high advisory

Remote Authentication Bypass in Netcore POWER13 Routers

A publicly disclosed vulnerability in Netcore POWER13 (version 2.0.240730.162638) allows remote attackers to manipulate the routerd.passwd_set function via /ubus, resulting in weak password recovery.

POWER13
1t 1c
critical advisory

Remote Command Injection in Netcore NR289-GE

Netcore NR289-GE version 1.4.5102 is vulnerable to remote unauthenticated OS command injection via the ip argument in the /ap_ip.cgi component.

NR289-GE cve remote-code-execution network-device edge-security
2r 3t 3c
critical advisory

Missing Authorization Vulnerability in Netcore NBR100V2

An unauthenticated remote authorization bypass vulnerability exists in the Netcore NBR100V2 router, allowing attackers to manipulate system configurations via the ACL Handler component.

NBR100V2 vulnerability network-security acl-bypass
1c
critical advisory

Remote Command Injection in Netcore NBR200V2 Traceroute Feature

Netcore NBR200V2 version 1.3.241127.071246 is vulnerable to remote command injection via the Traceroute Diagnostic Feature, allowing unauthenticated attackers to execute arbitrary commands.

PoC NBR200V2 remote-code-execution network-security vulnerability cve-2026-94097 command-injection network-infrastructure
2r 3t 5c updated