NE
Vendor
Netcore
57
CVEs
0
On KEV
21
New 30D
Products
NR10.0
NR268
Netcore
10 CVEs0 on KEV8 new
NR10.0
NR289-GE
Netcore
6 CVEs0 on KEV6 new
NR9.8
NR256CN
Netcore
4 CVEs0 on KEV4 new
NA10.0
NAP930
Netcore
2 CVEs0 on KEV2 new
PO8.3
POWER13
Netcore
1 CVEs0 on KEV1 new
NR8.8
NR255-V
Netcore
23 CVEs0 on KEV0 new
NB10.0
NBR200V2
Netcore
9 CVEs0 on KEV0 new
NB10.0
NBR100V2
Netcore
1 CVEs0 on KEV0 new
P18.8
Power 15AX
Netcore
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112016 | NR NR256CN Netcore | 6.5 | Oct 18 | Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files |
| CVE-2026-111712 | NR NR256CN Netcore | 6.5 | Oct 16 | Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix |
| CVE-2026-111711 | NR NR256CN Netcore | 9.8 | Oct 16 | Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok() |
| CVE-2026-111710 | NR NR256CN Netcore | 7.5 | Oct 16 | Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS |
| CVE-2026-108932 | NR NR268 Netcore | 4.3 | Oct 12 | Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting |
| CVE-2026-108931 | NR NR268 Netcore | 4.3 | Oct 12 | Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting |
| CVE-2026-108930 | NR NR268 Netcore | 2.7 | Oct 12 | Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure |
| CVE-2026-108929 | NR NR268 Netcore | 9.9 | Oct 12 | Netcore NR268 DDNS DDNSset.cgi execvp argument injection |
| CVE-2026-108909 | NR NR268 Netcore | 4.3 | Oct 12 | Netcore NR268 CGI Endpoint cross-site request forgery |
| CVE-2026-108908 | NR NR268 Netcore | 2.4 | Oct 12 | Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting |
| CVE-2026-108907 | NR NR268 Netcore | 10.0 | Oct 12 | Netcore NR268 CGI Execution user_ok improper authentication |
| CVE-2026-108906 | NR NR268 Netcore | 7.2 | Oct 12 | Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds |
| CVE-2026-102241 | NA NAP930 Netcore | 2.7 | Sep 29 | Netcore NAP930 Backup/Restore backup_common.sh hard-coded key |
| CVE-2026-102240 | NA NAP930 Netcore | 10.0 | Sep 29 | Netcore NAP930 Network Tools CGI network_tools eval os command injection |
| CVE-2026-101188 | PO POWER13 Netcore | 8.3 | Sep 28 | Netcore POWER13 ubus routerd.passwd_set password recovery |
| CVE-2026-101077 | NR NR289-GE Netcore | 10.0 | Sep 28 | Netcore NR289-GE boa_temp process_request missing authentication |
| CVE-2026-101076 | NR NR289-GE Netcore | 10.0 | Sep 28 | Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection |
| CVE-2026-101075 | NR NR289-GE Netcore | 10.0 | Sep 28 | Netcore NR289-GE Location Time location_time.cgi system os command injection |
| CVE-2026-101074 | NR NR289-GE Netcore | 9.8 | Sep 28 | Netcore NR289-GE Authentication boa password-check stack-based overflow |
| CVE-2026-101073 | NR NR289-GE Netcore | 8.3 | Sep 28 | Netcore NR289-GE CGI Dispatcher boa improper authentication |
| CVE-2026-101072 | NR NR289-GE Netcore | 10.0 | Sep 28 | Netcore NR289-GE CGI ap_ip.cgi system os command injection |
| CVE-2026-101002 | NB NBR200V2 Netcore | 9.9 | Sep 28 | Netcore NBR200V2 Tools Ping network_tools system os command injection |
| CVE-2026-101001 | NB NBR200V2 Netcore | 10.0 | Sep 28 | Netcore NBR200V2 Web Management network_tools eval os command injection |
| CVE-2026-101000 | NB NBR100V2 Netcore | 10.0 | Sep 28 | Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization |
| CVE-2026-94101 | NB NBR200V2 Netcore | 9.9 | Sep 21 | Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow |
| CVE-2026-94100 | NB NBR200V2 Netcore | 9.9 | Sep 21 | Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow |
| CVE-2026-94099 | NB NBR200V2 Netcore | 9.9 | Sep 21 | Netcore NBR200V2 Backup Restore restore.cgi command injection |
| CVE-2026-94098 | NB NBR200V2 Netcore | 9.1 | Sep 21 | Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection |
| CVE-2026-94097 | NB NBR200V2 Netcore | 10.0 | Sep 20 | Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection |
| CVE-2026-94096 | NB NBR200V2 Netcore | 9.9 | Sep 20 | Netcore NBR200V2 LAN IP Configuration network_tools command injection |
| CVE-2026-94095 | NB NBR200V2 Netcore | 9.9 | Sep 20 | Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection |
| CVE-2026-92257 | NR NR255-V Netcore | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks |
| CVE-2026-92256 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers |
| CVE-2026-92255 | NR NR255-V Netcore | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse |
| CVE-2026-76873 | NR NR255-V Netcore | 5.2 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields |
| CVE-2026-76872 | NR NR255-V Netcore | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages |
| CVE-2026-76871 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers |
| CVE-2026-76870 | NR NR255-V Netcore | 7.1 | Sep 15 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation |
| CVE-2026-76869 | NR NR255-V Netcore | 7.2 | Sep 15 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi |
| CVE-2026-76868 | NR NR255-V Netcore | 4.9 | Sep 15 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port |
| CVE-2026-76867 | NR NR255-V Netcore | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers |
| CVE-2026-76866 | NR NR255-V Netcore | 7.2 | Sep 15 | Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters |
| CVE-2026-76865 | NR NR255-V Netcore | 4.9 | Sep 15 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers |
| CVE-2026-76864 | NR NR255-V Netcore | 4.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names |
| CVE-2026-76863 | NR NR255-V Netcore | 4.3 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes |
| CVE-2026-76862 | NR NR255-V Netcore | 8.8 | Sep 15 | Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths |
| CVE-2026-76861 | NR NR255-V Netcore | 8.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi |
| CVE-2026-76860 | NR NR255-V Netcore | 8.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization |
| CVE-2026-76859 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi |
| CVE-2026-76858 | NR NR255-V Netcore | 4.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi |
| CVE-2026-76857 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi |
| CVE-2026-76856 | NR NR255-V Netcore | 8.1 | Sep 15 | Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints |
| CVE-2026-76855 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints |
| CVE-2026-76854 | NR NR255-V Netcore | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi |
| CVE-2026-76853 | NR NR268 Netcore | 8.1 | Sep 15 | Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi |
| CVE-2026-76852 | NR NR268 Netcore | 8.8 | Sep 15 | Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write |
| CVE-2026-4840 | P1 Power 15AX Netcore | 8.8 | Mar 26 | Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection |
