Netcore vulnerabilities
61 CVEs and advisories name Netcore as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121382Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
- CVE-2026-112016Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files
- CVE-2026-111712Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix
- CVE-2026-111711Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
- CVE-2026-111710Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
- CVE-2026-108932Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
- CVE-2026-108931Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
- CVE-2026-108930Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
- CVE-2026-108929Netcore NR268 DDNS DDNSset.cgi execvp argument injection
- CVE-2026-108909Netcore NR268 CGI Endpoint cross-site request forgery
- CVE-2026-108908Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
- CVE-2026-108907Netcore NR268 CGI Execution user_ok improper authentication
- CVE-2026-108906Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
- CVE-2026-102241Netcore NAP930 Backup/Restore backup_common.sh hard-coded key
- CVE-2026-102240Netcore NAP930 Network Tools CGI network_tools eval os command injection
- CVE-2026-101188Netcore POWER13 ubus routerd.passwd_set password recovery
- CVE-2026-101077Netcore NR289-GE boa_temp process_request missing authentication
- CVE-2026-101076Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
- CVE-2026-101075Netcore NR289-GE Location Time location_time.cgi system os command injection
- CVE-2026-101074Netcore NR289-GE Authentication boa password-check stack-based overflow
- CVE-2026-101073Netcore NR289-GE CGI Dispatcher boa improper authentication
- CVE-2026-101072Netcore NR289-GE CGI ap_ip.cgi system os command injection
- CVE-2026-101002Netcore NBR200V2 Tools Ping network_tools system os command injection
- CVE-2026-101001Netcore NBR200V2 Web Management network_tools eval os command injection
- CVE-2026-101000Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization
- CVE-2026-94101Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow
- CVE-2026-94100Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow
- CVE-2026-94099Netcore NBR200V2 Backup Restore restore.cgi command injection
- CVE-2026-94098Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection
- CVE-2026-94097Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection