Netcore - vulnerabilities (CVEs)

60 CVEs in 13 products, 24 in the last 30 days, newest from 2026-10-18.

Products

Nr255-v - 23 CVEs
Nbr200v2 - 9 CVEs
Nr268 - 8 CVEs
Nr289-ge - 6 CVEs
Nr256cn - 4 CVEs
B6v2 - 3 CVEs
Nbr1005gpev2 - 3 CVEs
Cover5 - 2 CVEs
Nap830 - 2 CVEs
Nap930 - 2 CVEs
Nbr100v2 - 2 CVEs
Power13 - 1 CVEs
Power 15ax - 1 CVEs

Newest CVEs of Netcore

CVE-2026-112016 - CVSS 6.9 (medium), 2026-10-18: Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to…
CVE-2026-111712 - CVSS 6.9 (medium), 2026-10-16: Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI…
CVE-2026-111711 - CVSS 9.8 (critical), 2026-10-16: Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies…
CVE-2026-111710 - CVSS 8.7 (high), 2026-10-16: Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated…
CVE-2026-108932 - CVSS 5.3 (medium), 2026-10-12: A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname…
CVE-2026-108931 - CVSS 5.3 (medium), 2026-10-12: A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component DHCP Handler. The…
CVE-2026-108930 - CVSS 5.1 (medium), 2026-10-12: A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the…
CVE-2026-108929 - CVSS 9.9 (critical), 2026-10-12: A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS.…
CVE-2026-108909 - CVSS 5.3 (medium), 2026-10-12: A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint.…
CVE-2026-108908 - CVSS 4.8 (medium), 2026-10-12: A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the file /router/l7_call_board_user_set.cgi…
CVE-2026-108907 - CVSS 10 (critical), 2026-10-12: A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper…
CVE-2026-108906 - CVSS 8.6 (high), 2026-10-12: A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The…
CVE-2026-102241 - CVSS 5.1 (medium), 2026-09-29: A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the…
CVE-2026-102240 - CVSS 10 (critical), 2026-09-29: A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network…
CVE-2026-101188 - CVSS 8.3 (high), 2026-09-28: A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the file /ubus. Such…
CVE-2026-101077 - CVSS 10 (critical), 2026-09-28: A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes…
CVE-2026-101076 - CVSS 10 (critical), 2026-09-28: A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler.…
CVE-2026-101075 - CVSS 10 (critical), 2026-09-28: A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the…
CVE-2026-101074 - CVSS 9.8 (critical), 2026-09-28: A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component…
CVE-2026-101073 - CVSS 8.3 (high), 2026-09-28: A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher.…
CVE-2026-101072 - CVSS 10 (critical), 2026-09-28: A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such…
CVE-2026-101002 - CVSS 9.9 (critical), 2026-09-28: A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component…
CVE-2026-101001 - CVSS 10 (critical), 2026-09-28: A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component…
CVE-2026-101000 - CVSS 10 (critical), 2026-09-28: A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file…
CVE-2026-94101 - CVSS 9.9 (critical), 2026-09-21: A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file…
CVE-2026-94100 - CVSS 9.9 (critical), 2026-09-21: A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the…
CVE-2026-94099 - CVSS 9.9 (critical), 2026-09-21: A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component…
CVE-2026-94098 - CVSS 9.4 (critical), 2026-09-21: A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the…
CVE-2026-94097 - CVSS 10 (critical), 2026-09-20: A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI…
CVE-2026-94096 - CVSS 9.9 (critical), 2026-09-20: A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of…