Netcore vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-111711 Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-autCritical 9.3 · Oct 16, 2026
• CVE-2026-111710 Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated atHigh 8.7 · Oct 16, 2026
• CVE-2026-108929 A flaw has been found in Netcore NR268 1.7.121109.Critical 9.4 · Oct 12, 2026
• CVE-2026-108907 A vulnerability was determined in Netcore NR268 1.7.121109.Critical 9.3 · Oct 12, 2026
• CVE-2026-108906 A vulnerability has been found in Netcore NR268 1.7.121109.High 7.3 · Oct 12, 2026
• CVE-2026-102240 A vulnerability was found in Netcore NAP930 0.1.241010.141410.Critical 9.3 · Sep 28, 2026
• CVE-2026-101077 A flaw has been found in Netcore NR289-GE 1.4.5102.Critical 9.3 · Sep 28, 2026
• CVE-2026-101076 A vulnerability was detected in Netcore NR289-GE 1.4.5102.Critical 9.3 · Sep 28, 2026
• CVE-2026-101075 A security vulnerability has been detected in Netcore NR289-GE 1.4.5102.Critical 9.3 · Sep 28, 2026
• CVE-2026-101074 A weakness has been identified in Netcore NR289-GE 1.4.5102.High 8.9 · Sep 28, 2026
• CVE-2026-101072 A vulnerability was identified in Netcore NR289-GE 1.4.5102.Critical 9.3 · Sep 28, 2026
• CVE-2026-101002 A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 28, 2026
• CVE-2026-101001 A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246.Critical 9.3 · Sep 28, 2026
• CVE-2026-101000 A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928.Critical 9.3 · Sep 28, 2026
• CVE-2026-94101 A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 20, 2026
• CVE-2026-94100 A weakness has been identified in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 20, 2026
• CVE-2026-94099 A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 20, 2026
• CVE-2026-94098 A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246.High 8.5 · Sep 20, 2026
• CVE-2026-94097 A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246.Critical 9.3 · Sep 20, 2026
• CVE-2026-94096 A vulnerability was found in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 20, 2026
• CVE-2026-94095 A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246.High 8.6 · Sep 20, 2026
• CVE-2026-92256 NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_show_cgi.c, and mod_vpn_remote/plan.json High 7.1 · Sep 15, 2026
• CVE-2026-76871 Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json, pptpd_user_show.cgi, pptp_client_confiHigh 7.1 · Sep 15, 2026
• CVE-2026-76870 Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine triggered by short firmware uploadHigh 7.1 · Sep 15, 2026
• CVE-2026-76869 Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing.High 8.6 · Sep 15, 2026