Netcore vulnerabilities

Products

• Nr255-v 23
• Nbr200v2 12
• Nr268 10
• Nr289-ge 6
• Nap930 4
• Nr256cn 4
• B6v2 3
• Nbr1005gpev2 3
• Nbr100v2 3
• Cover5 2
• Nap830 2
• Power13 2

Newest

• netcore nr256cn Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files CVE-2026-112016 6.9 MediumOctober 18, 2026
• netcore nr256cn Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix CVE-2026-111712 6.9 MediumOctober 16, 2026
• netcore nr256cn Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() CVE-2026-111711 9.3 CriticalOctober 16, 2026
• netcore nr256cn Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS CVE-2026-111710 8.7 HighOctober 16, 2026
• netcore nr268 Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting CVE-2026-108932 5.3 MediumOctober 12, 2026
• netcore nr268 Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting CVE-2026-108931 5.3 MediumOctober 12, 2026
• netcore nr268 Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure CVE-2026-108930 5.1 MediumOctober 12, 2026
• netcore nr268 Netcore NR268 DDNS DDNSset.cgi execvp argument injection CVE-2026-108929 9.4 CriticalOctober 12, 2026
• netcore nr268 Netcore NR268 CGI Endpoint cross-site request forgery CVE-2026-108909 5.3 MediumOctober 12, 2026
• netcore nr268 Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting CVE-2026-108908 4.8 MediumOctober 12, 2026
• netcore nr268 Netcore NR268 CGI Execution user_ok improper authentication CVE-2026-108907 10.0 CriticalOctober 12, 2026
• netcore nr268 Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds CVE-2026-108906 8.6 HighOctober 12, 2026
• netcore nap930 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key CVE-2026-102241 5.1 MediumSeptember 29, 2026
• netcore nap930 Netcore NAP930 Network Tools CGI network_tools eval os command injection CVE-2026-102240 10.0 CriticalSeptember 29, 2026
• netcore power13 Netcore POWER13 ubus routerd.passwd_set password recovery CVE-2026-101188 6.9 MediumSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE boa_temp process_request missing authentication CVE-2026-101077 10.0 CriticalSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection CVE-2026-101076 10.0 CriticalSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE Location Time location_time.cgi system os command injection CVE-2026-101075 10.0 CriticalSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE Authentication boa password-check stack-based overflow CVE-2026-101074 9.3 CriticalSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE CGI Dispatcher boa improper authentication CVE-2026-101073 6.9 MediumSeptember 28, 2026
• netcore nr289-ge Netcore NR289-GE CGI ap_ip.cgi system os command injection CVE-2026-101072 10.0 CriticalSeptember 28, 2026
• netcore nbr200v2 Netcore NBR200V2 Tools Ping network_tools system os command injection CVE-2026-101002 9.4 CriticalSeptember 28, 2026
• netcore nbr200v2 Netcore NBR200V2 Web Management network_tools eval os command injection CVE-2026-101001 10.0 CriticalSeptember 28, 2026
• netcore nbr100v2 Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization CVE-2026-101000 10.0 CriticalSeptember 28, 2026
• netcore nbr200v2 Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow CVE-2026-94101 9.4 CriticalSeptember 21, 2026
• netcore nbr200v2 Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow CVE-2026-94100 9.4 CriticalSeptember 21, 2026
• netcore nbr200v2 Netcore NBR200V2 Backup Restore restore.cgi command injection CVE-2026-94099 9.4 CriticalSeptember 21, 2026
• netcore nbr200v2 Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection CVE-2026-94098 9.4 CriticalSeptember 21, 2026
• netcore nbr200v2 Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection CVE-2026-94097 10.0 CriticalSeptember 20, 2026
• netcore nbr200v2 Netcore NBR200V2 LAN IP Configuration network_tools command injection CVE-2026-94096 9.4 CriticalSeptember 20, 2026
• netcore nbr200v2 Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection CVE-2026-94095 Public exploit 9.4 CriticalSeptember 20, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks CVE-2026-92257 5.1 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers CVE-2026-92256 7.1 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse CVE-2026-92255 5.3 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields CVE-2026-76873 5.1 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages CVE-2026-76872 5.1 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers CVE-2026-76871 7.1 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation CVE-2026-76870 7.1 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi CVE-2026-76869 8.6 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port CVE-2026-76868 6.9 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers CVE-2026-76867 5.1 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters CVE-2026-76866 8.6 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers CVE-2026-76865 6.9 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names CVE-2026-76864 4.8 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes CVE-2026-76863 5.3 MediumSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths CVE-2026-76862 8.7 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi CVE-2026-76861 8.7 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization CVE-2026-76860 8.7 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi CVE-2026-76859 7.1 HighSeptember 15, 2026
• netcore nr255-v Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi CVE-2026-76858 4.8 MediumSeptember 15, 2026
• Show olderLoading…