Login Request a demo
NR
Product
NR268
by Netcore · last CVE Oct 12, 2026
10
CVEs
0
On KEV
10.0
Max CVSS
8
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 3Medium 3Low 2
Severity
All severities10Critical2High3Medium3Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NR268 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108907
10.0
1%
Oct 12
Netcore NR268 CGI Execution user_ok improper authentication
Affected: 1.7.121109
CVE-2026-108929
9.9
0%
Oct 12
Netcore NR268 DDNS DDNSset.cgi execvp argument injection
Affected: 1.7.121109
CVE-2026-76852
8.8
0%
Sep 15
Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
Affected: 1.7.121109
CVE-2026-76853
8.1
0%
Sep 15
Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
Affected: 1.7.121109
CVE-2026-108906
7.2
0%
Oct 12
Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
Affected: 1.7.121109
CVE-2026-108932
4.3
0%
Oct 12
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
Affected: 1.7.121109
CVE-2026-108931
4.3
0%
Oct 12
Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
Affected: 1.7.121109
CVE-2026-108909
4.3
0%
Oct 12
Netcore NR268 CGI Endpoint cross-site request forgery
Affected: 1.7.121109
CVE-2026-108930
2.7
0%
Oct 12
Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
Affected: 1.7.121109
CVE-2026-108908
2.4
0%
Oct 12
Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
Affected: 1.7.121109
Showing 10