Netcore

Products

ProductCVEsExploitedLatest
NR255-V23–Sep 15, 2026
NBR200V212–Sep 28, 2026
NR26810–Oct 12, 2026
NR289-GE6–Sep 28, 2026
NAP9304–Sep 29, 2026
NR256CN4–Oct 18, 2026
NBR100V24–Nov 3, 2026
B6V23–May 25, 2025
NBR1005GPEV23–May 25, 2025
NAP8302–May 25, 2025
COVER52–May 25, 2025
POWER132–Sep 28, 2026
Power 15AX1–Mar 26, 2026

Exploited and recent CVEs

  • CVE-2026-121382 High 7.5 Netcore NBR100V2 auto_ac msg_aes_dec integer overflow 0.6%
  • CVE-2026-112016 Medium 6.5 Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files 0.3%
  • CVE-2026-111712 Medium 6.5 Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix 0.2%
  • CVE-2026-111711 Critical 9.8 Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() 0.5%
  • CVE-2026-111710 High 7.5 Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS 0.3%
  • CVE-2026-108932 Medium 4.3 Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting 0.3%
  • CVE-2026-108931 Medium 4.3 Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting 0.3%
  • CVE-2026-108930 Low 2.7 Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure 0.3%
  • CVE-2026-108929 Critical 9.9 Netcore NR268 DDNS DDNSset.cgi execvp argument injection 0.4%
  • CVE-2026-108909 Medium 4.3 Netcore NR268 CGI Endpoint cross-site request forgery 0.2%
  • CVE-2026-108908 Low 2.4 Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting 0.2%
  • CVE-2026-108907 Critical 10.0 Netcore NR268 CGI Execution user_ok improper authentication 1.2%
  • CVE-2026-108906 High 7.2 Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds 0.4%
  • CVE-2026-102241 Low 2.7 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key 0.2%
  • CVE-2026-102240 Critical 10.0 Netcore NAP930 Network Tools CGI network_tools eval os command injection 2.0%
  • CVE-2026-101188 High 8.3 Netcore POWER13 ubus routerd.passwd_set password recovery 0.4%
  • CVE-2026-101077 Critical 10.0 Netcore NR289-GE boa_temp process_request missing authentication 0.7%
  • CVE-2026-101076 Critical 10.0 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection 2.0%
  • CVE-2026-101075 Critical 10.0 Netcore NR289-GE Location Time location_time.cgi system os command injection 2.0%
  • CVE-2026-101074 Critical 9.8 Netcore NR289-GE Authentication boa password-check stack-based overflow 0.8%
  • CVE-2026-101073 High 8.3 Netcore NR289-GE CGI Dispatcher boa improper authentication 0.4%
  • CVE-2026-101072 Critical 10.0 Netcore NR289-GE CGI ap_ip.cgi system os command injection 2.0%
  • CVE-2026-101002 Critical 9.9 Netcore NBR200V2 Tools Ping network_tools system os command injection 1.7%
  • CVE-2026-101001 Critical 10.0 Netcore NBR200V2 Web Management network_tools eval os command injection 2.6%
  • CVE-2026-101000 Critical 10.0 Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization 0.5%
  • CVE-2026-94101 Critical 9.9 Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow 0.4%
  • CVE-2026-94100 Critical 9.9 Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow 0.8%
  • CVE-2026-94099 Critical 9.9 Netcore NBR200V2 Backup Restore restore.cgi command injection 1.7%
  • CVE-2026-94098 Critical 9.1 Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection 2.4%
  • CVE-2026-94097 Critical 10.0 Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection 3.0%