CVE-2026-102240
CriticalCVSS 10.0Summary
A vulnerability was found in Netcore NAP930 0.1.241010.141410 in the eval function of the /www/cgi-bin/network_tools file of the Network Tools CGI component. Manipulation of the sid argument results in OS command injection. The attack can be performed remotely and the exploit has been made public.
Risk Assessment
A remote attacker can execute arbitrary system commands on the device, potentially leading to full compromise of the device and network.
Recommendation
Immediately update the device firmware if a patch is available, and restrict access to the administrative interface from trusted networks.
Other vulnerabilities in Netcore NAP930
Original NVD description (English source)
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS