Netcore vulnerabilities
61 CVEs and advisories name Netcore as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-94096Netcore NBR200V2 LAN IP Configuration network_tools command injection
- CVE-2026-94095Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection
- CVE-2026-92257Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
- CVE-2026-92256Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
- CVE-2026-92255Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse
- CVE-2026-76873Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields
- CVE-2026-76872Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages
- CVE-2026-76871Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers
- CVE-2026-76870Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation
- CVE-2026-76869Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi
- CVE-2026-76868Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port
- CVE-2026-76867Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers
- CVE-2026-76866Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
- CVE-2026-76865Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
- CVE-2026-76864Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names
- CVE-2026-76863Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
- CVE-2026-76862Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
- CVE-2026-76861Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
- CVE-2026-76860Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
- CVE-2026-76859Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi
- CVE-2026-76858Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
- CVE-2026-76857Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi
- CVE-2026-76856Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
- CVE-2026-76855Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints
- CVE-2026-76854Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi
- CVE-2026-76853Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
- CVE-2026-76852Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
- CVE-2026-4840Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection
- CVE-2025-5147Netcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection
- CVE-2025-5146Netcore NBR200V2 HTTP Header routerd passwd_set command injection