CVE-2026-78796

CriticalCVSS 9.8

Published: 09/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file.

Risk Assessment

A remote attacker can execute arbitrary code on the device, potentially leading to full compromise of the router and network traffic.

Recommendation

Update the Netcore B11 router firmware to the latest version or restrict access to the management interface to trusted networks only.

Other vulnerabilities in Netcore B11

CVE-2026-78795High
A vulnerability in the Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router allows a remote attacker to obtain sensitive information. The issue affects version v1.3.241114.024540 and earlier.

Original NVD description (English source)

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file

Vulnerability data from NVD (NIST) · CISA KEV · EPSS