{"items":[{"id":"CVE-2026-121382","published":"2026-11-03T18:45:19.264Z","updated":"2026-11-03T19:37:03.590Z","title":"Netcore NBR100V2 auto_ac msg_aes_dec integer overflow","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NBR100V2","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2026-112016","published":"2026-10-18T11:38:37.119Z","updated":"2026-10-19T16:03:11.589Z","title":"Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-111712","published":"2026-10-16T17:40:02.008Z","updated":"2026-10-16T18:19:03.901Z","title":"Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2026-111711","published":"2026-10-16T17:40:01.282Z","updated":"2026-10-16T21:16:42.070Z","title":"Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()","severity":"CRITICAL","score":9.3,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2026-111710","published":"2026-10-16T17:40:00.612Z","updated":"2026-10-19T14:03:41.974Z","title":"Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR256CN","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2026-108932","published":"2026-10-12T21:30:15.257Z","updated":"2026-10-14T11:47:03.103Z","title":"Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-108931","published":"2026-10-12T21:00:15.658Z","updated":"2026-10-15T13:56:40.661Z","title":"Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-108930","published":"2026-10-12T20:45:12.622Z","updated":"2026-10-13T15:53:31.469Z","title":"Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2026-108929","published":"2026-10-12T20:30:18.334Z","updated":"2026-10-16T17:19:27.963Z","title":"Netcore NR268 DDNS DDNSset.cgi execvp argument injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-108909","published":"2026-10-12T16:45:17.961Z","updated":"2026-10-13T16:05:03.551Z","title":"Netcore NR268 CGI Endpoint cross-site request forgery","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-108908","published":"2026-10-12T16:30:20.071Z","updated":"2026-10-15T15:14:51.246Z","title":"Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting","severity":"MEDIUM","score":4.8,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00202,"kevAdded":null},{"id":"CVE-2026-108907","published":"2026-10-12T16:15:10.558Z","updated":"2026-10-13T16:24:18.568Z","title":"Netcore NR268 CGI Execution user_ok improper authentication","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.01234,"kevAdded":null},{"id":"CVE-2026-108906","published":"2026-10-12T16:00:15.070Z","updated":"2026-10-15T02:26:24.557Z","title":"Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds","severity":"HIGH","score":8.6,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2026-102241","published":"2026-09-29T02:15:07.713Z","updated":"2026-10-01T15:30:21.371Z","title":"Netcore NAP930 Backup/Restore backup_common.sh hard-coded key","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NAP930","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-102240","published":"2026-09-29T02:00:13.759Z","updated":"2026-09-29T17:21:09.679Z","title":"Netcore NAP930 Network Tools CGI network_tools eval os command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NAP930","kev":false,"epss":0.02011,"kevAdded":null},{"id":"CVE-2026-101188","published":"2026-09-28T21:00:08.288Z","updated":"2026-10-01T15:03:53.564Z","title":"Netcore POWER13 ubus routerd.passwd_set password recovery","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"POWER13","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2026-101077","published":"2026-09-28T15:15:05.832Z","updated":"2026-09-28T15:31:09.656Z","title":"Netcore NR289-GE boa_temp process_request missing authentication","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2026-101076","published":"2026-09-28T15:00:07.606Z","updated":"2026-10-01T14:22:01.155Z","title":"Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.02011,"kevAdded":null},{"id":"CVE-2026-101075","published":"2026-09-28T14:45:11.877Z","updated":"2026-09-28T16:27:41.533Z","title":"Netcore NR289-GE Location Time location_time.cgi system os command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.02028,"kevAdded":null},{"id":"CVE-2026-101074","published":"2026-09-28T14:30:13.492Z","updated":"2026-09-28T15:21:44.812Z","title":"Netcore NR289-GE Authentication boa password-check stack-based overflow","severity":"CRITICAL","score":9.3,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.00778,"kevAdded":null},{"id":"CVE-2026-101073","published":"2026-09-28T14:00:09.779Z","updated":"2026-10-01T14:18:36.631Z","title":"Netcore NR289-GE CGI Dispatcher boa improper authentication","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-101072","published":"2026-09-28T13:45:08.631Z","updated":"2026-09-28T13:58:31.869Z","title":"Netcore NR289-GE CGI ap_ip.cgi system os command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NR289-GE","kev":false,"epss":0.01989,"kevAdded":null},{"id":"CVE-2026-101002","published":"2026-09-28T05:15:11.044Z","updated":"2026-09-28T12:49:23.377Z","title":"Netcore NBR200V2 Tools Ping network_tools system os command injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.0167,"kevAdded":null},{"id":"CVE-2026-101001","published":"2026-09-28T05:00:13.224Z","updated":"2026-09-28T12:28:50.052Z","title":"Netcore NBR200V2 Web Management network_tools eval os command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.02635,"kevAdded":null},{"id":"CVE-2026-101000","published":"2026-09-28T04:45:11.474Z","updated":"2026-10-01T14:05:47.584Z","title":"Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NBR100V2","kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2026-94101","published":"2026-09-21T00:45:11.529Z","updated":"2026-09-21T10:47:46.472Z","title":"Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2026-94100","published":"2026-09-21T00:30:15.953Z","updated":"2026-09-21T19:35:44.379Z","title":"Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.00805,"kevAdded":null},{"id":"CVE-2026-94099","published":"2026-09-21T00:15:06.412Z","updated":"2026-09-22T15:41:49.645Z","title":"Netcore NBR200V2 Backup Restore restore.cgi command injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.01687,"kevAdded":null},{"id":"CVE-2026-94098","published":"2026-09-21T00:00:10.155Z","updated":"2026-09-21T16:00:36.531Z","title":"Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.02385,"kevAdded":null},{"id":"CVE-2026-94097","published":"2026-09-20T23:45:10.912Z","updated":"2026-09-24T12:43:07.627Z","title":"Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection","severity":"CRITICAL","score":10,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.02973,"kevAdded":null},{"id":"CVE-2026-94096","published":"2026-09-20T23:30:12.665Z","updated":"2026-09-21T10:51:26.704Z","title":"Netcore NBR200V2 LAN IP Configuration network_tools command injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.01994,"kevAdded":null},{"id":"CVE-2026-94095","published":"2026-09-20T23:15:14.449Z","updated":"2026-09-21T19:39:17.603Z","title":"Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection","severity":"CRITICAL","score":9.4,"vendor":"Netcore","product":"NBR200V2","kev":false,"epss":0.02358,"kevAdded":null},{"id":"CVE-2026-92257","published":"2026-09-15T21:58:05.366Z","updated":"2026-09-21T17:55:57.312Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-92256","published":"2026-09-15T21:58:04.659Z","updated":"2026-09-16T19:33:51.915Z","title":"Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-92255","published":"2026-09-15T21:58:03.906Z","updated":"2026-09-21T20:53:03.576Z","title":"Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2026-76873","published":"2026-09-15T21:58:03.216Z","updated":"2026-09-16T19:01:53.273Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-76872","published":"2026-09-15T21:58:02.508Z","updated":"2026-09-17T16:55:25.813Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-76871","published":"2026-09-15T21:58:01.852Z","updated":"2026-09-21T17:54:33.920Z","title":"Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-76870","published":"2026-09-15T21:58:01.174Z","updated":"2026-09-16T19:32:33.063Z","title":"Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2026-76869","published":"2026-09-15T21:58:00.461Z","updated":"2026-09-17T19:27:01.218Z","title":"Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi","severity":"HIGH","score":8.6,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00572,"kevAdded":null},{"id":"CVE-2026-76868","published":"2026-09-15T21:57:59.761Z","updated":"2026-09-16T19:02:25.587Z","title":"Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2026-76867","published":"2026-09-15T21:57:59.049Z","updated":"2026-09-17T16:54:50.262Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers","severity":"MEDIUM","score":5.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-76866","published":"2026-09-15T21:57:58.285Z","updated":"2026-09-21T18:00:18.498Z","title":"Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters","severity":"HIGH","score":8.6,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00572,"kevAdded":null},{"id":"CVE-2026-76865","published":"2026-09-15T21:57:57.602Z","updated":"2026-09-16T19:31:50.392Z","title":"Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers","severity":"MEDIUM","score":6.9,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2026-76864","published":"2026-09-15T21:57:56.916Z","updated":"2026-09-17T19:27:10.526Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names","severity":"MEDIUM","score":4.8,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-76863","published":"2026-09-15T21:57:56.227Z","updated":"2026-09-16T19:03:41.443Z","title":"Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2026-76862","published":"2026-09-15T21:57:55.558Z","updated":"2026-09-17T16:53:59.252Z","title":"Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-76861","published":"2026-09-15T21:57:54.885Z","updated":"2026-09-21T18:13:26.296Z","title":"Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00676,"kevAdded":null},{"id":"CVE-2026-76860","published":"2026-09-15T21:57:54.190Z","updated":"2026-09-16T19:31:10.277Z","title":"Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-76859","published":"2026-09-15T21:57:53.501Z","updated":"2026-09-17T19:27:16.961Z","title":"Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-76858","published":"2026-09-15T21:57:52.802Z","updated":"2026-09-16T19:06:08.289Z","title":"Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi","severity":"MEDIUM","score":4.8,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-76857","published":"2026-09-15T21:57:52.138Z","updated":"2026-09-17T16:53:15.499Z","title":"Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-76856","published":"2026-09-15T21:57:51.479Z","updated":"2026-09-21T18:19:53.931Z","title":"Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints","severity":"HIGH","score":7,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-76855","published":"2026-09-15T21:57:50.785Z","updated":"2026-09-16T19:30:07.791Z","title":"Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2026-76854","published":"2026-09-15T21:57:50.108Z","updated":"2026-09-17T19:27:27.252Z","title":"Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi","severity":"HIGH","score":7.1,"vendor":"Netcore","product":"NR255-V","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2026-76853","published":"2026-09-15T21:57:49.437Z","updated":"2026-09-16T19:08:16.783Z","title":"Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi","severity":"HIGH","score":7.2,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-76852","published":"2026-09-15T21:57:48.762Z","updated":"2026-09-17T16:52:31.430Z","title":"Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"NR268","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-4840","published":"2026-03-26T04:05:35.547Z","updated":"2026-03-30T14:56:13.210Z","title":"Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection","severity":"HIGH","score":8.7,"vendor":"Netcore","product":"Power 15AX","kev":false,"epss":0.10659,"kevAdded":null},{"id":"CVE-2025-5147","published":"2025-05-25T11:31:04.116Z","updated":"2025-05-29T07:00:52.075Z","title":"Netcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NBR1005GPEV2","kev":false,"epss":0.01197,"kevAdded":null},{"id":"CVE-2025-5146","published":"2025-05-25T07:00:09.594Z","updated":"2025-05-29T07:00:40.229Z","title":"Netcore NBR200V2 HTTP Header routerd passwd_set command injection","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NBR1005GPEV2","kev":false,"epss":0.01197,"kevAdded":null},{"id":"CVE-2025-5145","published":"2025-05-25T05:31:04.552Z","updated":"2025-07-11T08:41:34.484Z","title":"Netcore POWER13 Query String cgi-bin command injection","severity":"MEDIUM","score":5.3,"vendor":"Netcore","product":"NBR1005GPEV2","kev":false,"epss":0.01197,"kevAdded":null}]}