Skip to content
NNetcore
Products
| Product | CVEs | Exploited | Latest |
| NR255-V | 23 | – | Sep 15, 2026 |
| NBR200V2 | 12 | – | Sep 28, 2026 |
| NR268 | 10 | – | Oct 12, 2026 |
| NR289-GE | 6 | – | Sep 28, 2026 |
| NAP930 | 4 | – | Sep 29, 2026 |
| NR256CN | 4 | – | Oct 18, 2026 |
| NBR100V2 | 4 | – | Nov 3, 2026 |
| B6V2 | 3 | – | May 25, 2025 |
| NBR1005GPEV2 | 3 | – | May 25, 2025 |
| NAP830 | 2 | – | May 25, 2025 |
| COVER5 | 2 | – | May 25, 2025 |
| POWER13 | 2 | – | Sep 28, 2026 |
| Power 15AX | 1 | – | Mar 26, 2026 |
Exploited and recent CVEs
-
CVE-2026-121382
High 7.5
Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
0.6%
-
CVE-2026-112016
Medium 6.5
Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files
0.3%
-
CVE-2026-111712
Medium 6.5
Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix
0.2%
-
CVE-2026-111711
Critical 9.8
Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
0.5%
-
CVE-2026-111710
High 7.5
Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
0.3%
-
CVE-2026-108932
Medium 4.3
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
0.3%
-
CVE-2026-108931
Medium 4.3
Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
0.3%
-
CVE-2026-108930
Low 2.7
Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
0.3%
-
CVE-2026-108929
Critical 9.9
Netcore NR268 DDNS DDNSset.cgi execvp argument injection
0.4%
-
CVE-2026-108909
Medium 4.3
Netcore NR268 CGI Endpoint cross-site request forgery
0.2%
-
CVE-2026-108908
Low 2.4
Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
0.2%
-
CVE-2026-108907
Critical 10.0
Netcore NR268 CGI Execution user_ok improper authentication
1.2%
-
CVE-2026-108906
High 7.2
Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
0.4%
-
CVE-2026-102241
Low 2.7
Netcore NAP930 Backup/Restore backup_common.sh hard-coded key
0.2%
-
CVE-2026-102240
Critical 10.0
Netcore NAP930 Network Tools CGI network_tools eval os command injection
2.0%
-
CVE-2026-101188
High 8.3
Netcore POWER13 ubus routerd.passwd_set password recovery
0.4%
-
CVE-2026-101077
Critical 10.0
Netcore NR289-GE boa_temp process_request missing authentication
0.7%
-
CVE-2026-101076
Critical 10.0
Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
2.0%
-
CVE-2026-101075
Critical 10.0
Netcore NR289-GE Location Time location_time.cgi system os command injection
2.0%
-
CVE-2026-101074
Critical 9.8
Netcore NR289-GE Authentication boa password-check stack-based overflow
0.8%
-
CVE-2026-101073
High 8.3
Netcore NR289-GE CGI Dispatcher boa improper authentication
0.4%
-
CVE-2026-101072
Critical 10.0
Netcore NR289-GE CGI ap_ip.cgi system os command injection
2.0%
-
CVE-2026-101002
Critical 9.9
Netcore NBR200V2 Tools Ping network_tools system os command injection
1.7%
-
CVE-2026-101001
Critical 10.0
Netcore NBR200V2 Web Management network_tools eval os command injection
2.6%
-
CVE-2026-101000
Critical 10.0
Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization
0.5%
-
CVE-2026-94101
Critical 9.9
Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow
0.4%
-
CVE-2026-94100
Critical 9.9
Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow
0.8%
-
CVE-2026-94099
Critical 9.9
Netcore NBR200V2 Backup Restore restore.cgi command injection
1.7%
-
CVE-2026-94098
Critical 9.1
Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection
2.4%
-
CVE-2026-94097
Critical 10.0
Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection
3.0%