NE
Vendor
Netcore
9 products with CVEs on record
57
CVEs
0
On KEV
21
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112016
NR
NR256CN
Netcore
6.5
0%
Oct 18Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files
CVE-2026-111712
NR
NR256CN
Netcore
6.5
0%
Oct 16Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix
CVE-2026-111711
NR
NR256CN
Netcore
9.8
0%
Oct 16Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
CVE-2026-111710
NR
NR256CN
Netcore
7.5
0%
Oct 16Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
CVE-2026-108932
NR
NR268
Netcore
4.3
0%
Oct 12Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
CVE-2026-108931
NR
NR268
Netcore
4.3
0%
Oct 12Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
CVE-2026-108930
NR
NR268
Netcore
2.7
0%
Oct 12Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure
CVE-2026-108929
NR
NR268
Netcore
9.9
0%
Oct 12Netcore NR268 DDNS DDNSset.cgi execvp argument injection
CVE-2026-108909
NR
NR268
Netcore
4.3
0%
Oct 12Netcore NR268 CGI Endpoint cross-site request forgery
CVE-2026-108908
NR
NR268
Netcore
2.4
0%
Oct 12Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting
CVE-2026-108907
NR
NR268
Netcore
10.0
1%
Oct 12Netcore NR268 CGI Execution user_ok improper authentication
CVE-2026-108906
NR
NR268
Netcore
7.2
0%
Oct 12Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
CVE-2026-102241
NA
NAP930
Netcore
2.7
0%
Sep 29Netcore NAP930 Backup/Restore backup_common.sh hard-coded key
CVE-2026-102240
NA
NAP930
Netcore
10.0
2%
Sep 29Netcore NAP930 Network Tools CGI network_tools eval os command injection
CVE-2026-101188
PO
POWER13
Netcore
8.3
0%
Sep 28Netcore POWER13 ubus routerd.passwd_set password recovery
CVE-2026-101077
NR
NR289-GE
Netcore
10.0
1%
Sep 28Netcore NR289-GE boa_temp process_request missing authentication
CVE-2026-101076
NR
NR289-GE
Netcore
10.0
2%
Sep 28Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
CVE-2026-101075
NR
NR289-GE
Netcore
10.0
2%
Sep 28Netcore NR289-GE Location Time location_time.cgi system os command injection
CVE-2026-101074
NR
NR289-GE
Netcore
9.8
1%
Sep 28Netcore NR289-GE Authentication boa password-check stack-based overflow
CVE-2026-101073
NR
NR289-GE
Netcore
8.3
0%
Sep 28Netcore NR289-GE CGI Dispatcher boa improper authentication
CVE-2026-101072
NR
NR289-GE
Netcore
10.0
2%
Sep 28Netcore NR289-GE CGI ap_ip.cgi system os command injection
CVE-2026-101002
NB
NBR200V2
Netcore
9.9
2%
Sep 28Netcore NBR200V2 Tools Ping network_tools system os command injection
CVE-2026-101001
NB
NBR200V2
Netcore
10.0
3%
Sep 28Netcore NBR200V2 Web Management network_tools eval os command injection
CVE-2026-101000
NB
NBR100V2
Netcore
10.0
1%
Sep 28Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization
CVE-2026-94101
NB
NBR200V2
Netcore
9.9
0%
Sep 21Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow
CVE-2026-94100
NB
NBR200V2
Netcore
9.9
1%
Sep 21Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow
CVE-2026-94099
NB
NBR200V2
Netcore
9.9
2%
Sep 21Netcore NBR200V2 Backup Restore restore.cgi command injection
CVE-2026-94098
NB
NBR200V2
Netcore
9.1
2%
Sep 21Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection
CVE-2026-94097
NB
NBR200V2
Netcore
10.0
3%
Sep 20Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection
CVE-2026-94096
NB
NBR200V2
Netcore
9.9
2%
Sep 20Netcore NBR200V2 LAN IP Configuration network_tools command injection
CVE-2026-94095
NB
NBR200V2
Netcore
9.9
2%
Sep 20Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection
CVE-2026-92257
NR
NR255-V
Netcore
5.4
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
CVE-2026-92256
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
CVE-2026-92255
NR
NR255-V
Netcore
5.4
0%
Sep 15Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse
CVE-2026-76873
NR
NR255-V
Netcore
5.2
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields
CVE-2026-76872
NR
NR255-V
Netcore
5.4
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages
CVE-2026-76871
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers
CVE-2026-76870
NR
NR255-V
Netcore
7.1
0%
Sep 15Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation
CVE-2026-76869
NR
NR255-V
Netcore
7.2
1%
Sep 15Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi
CVE-2026-76868
NR
NR255-V
Netcore
4.9
0%
Sep 15Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port
CVE-2026-76867
NR
NR255-V
Netcore
5.4
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers
CVE-2026-76866
NR
NR255-V
Netcore
7.2
1%
Sep 15Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
CVE-2026-76865
NR
NR255-V
Netcore
4.9
0%
Sep 15Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
CVE-2026-76864
NR
NR255-V
Netcore
4.8
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names
CVE-2026-76863
NR
NR255-V
Netcore
4.3
0%
Sep 15Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
CVE-2026-76862
NR
NR255-V
Netcore
8.8
1%
Sep 15Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
CVE-2026-76861
NR
NR255-V
Netcore
8.8
1%
Sep 15Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
CVE-2026-76860
NR
NR255-V
Netcore
8.8
1%
Sep 15Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
CVE-2026-76859
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi
CVE-2026-76858
NR
NR255-V
Netcore
4.8
0%
Sep 15Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
CVE-2026-76857
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi
CVE-2026-76856
NR
NR255-V
Netcore
8.1
0%
Sep 15Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
CVE-2026-76855
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints
CVE-2026-76854
NR
NR255-V
Netcore
6.5
0%
Sep 15Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi
CVE-2026-76853
NR
NR268
Netcore
8.1
0%
Sep 15Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
CVE-2026-76852
NR
NR268
Netcore
8.8
0%
Sep 15Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
CVE-2026-4840
P1
Power 15AX
Netcore
8.8
11%
Mar 26Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection