Netcore vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 202658

Newest CVEs

• CVE-2026-121382

  Netcore NBR100V2 auto_ac msg_aes_dec integer overflow

  Netcore · NBR100V2

  High8.7
• CVE-2026-112016

  Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files

  Netcore · NR256CN

  Medium6.9
• CVE-2026-111712

  Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix

  Netcore · NR256CN

  Medium6.9
• CVE-2026-111711

  Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()

  Netcore · NR256CN

  Critical9.3
• CVE-2026-111710

  Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS

  Netcore · NR256CN

  High8.7
• CVE-2026-108932

  Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting

  Netcore · NR268

  Medium5.3
• CVE-2026-108931

  Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting

  Netcore · NR268

  Medium5.3
• CVE-2026-108930

  Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure

  Netcore · NR268

  Medium5.1
• CVE-2026-108929

  Netcore NR268 DDNS DDNSset.cgi execvp argument injection

  Netcore · NR268

  Critical9.4
• CVE-2026-108909

  Netcore NR268 CGI Endpoint cross-site request forgery

  Netcore · NR268

  Medium5.3