CVE-2026-94101
CriticalCVSS 9.9Summary
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected function is vlan_load_form_uci in /usr/bin/routerd, where manipulation of the wan_num argument leads to buffer overflow. The attack can be initiated remotely and the exploit is publicly disclosed.
Risk Assessment
Buffer overflow could allow a remote attacker to execute arbitrary code or cause a denial of service, potentially leading to full device compromise and network security breach.
Recommendation
Immediately check for and apply firmware updates from the vendor. If unavailable, restrict external access to the device and monitor logs for suspicious activity.
Other vulnerabilities in Netcore NBR200V2
See all- CVE-2026-94100Critical
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. The affected function is wan_config_set_vlan in /usr/bin/routerd, where manipulation of the vlan_wanX.ports argument leads to buffer overflow. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-94099Critical
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. The issue affects the restore.cgi file in the Backup Restore component, where manipulation of the QUERY_STRING argument results in command injection. The attack can be carried out remotely and the exploit is publicly released.
- CVE-2026-94098Critical
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. The vulnerability affects the /www/cgi-bin/upgrade file in the Firmware Upgrade CGI Endpoint component, where manipulation of the QUERY_STRING argument leads to command injection. The attack can be executed remotely and the exploit is publicly available.
- CVE-2026-94097Critical
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. The vulnerability affects the /www/cgi-bin/network_tools file in the CGI Diagnostic Endpoint component, where manipulation of the param/key/val arguments causes command injection. Remote exploitation is possible and the exploit has been publicly disclosed.
- CVE-2026-94096Critical
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. The vulnerability affects the /usr/bin/network_tools file in the LAN IP Configuration Handler component, where manipulation of the ipv4 argument results in command injection. The attack may be launched remotely and the exploit has been made public.
- CVE-2026-94095Critical
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. The vulnerability affects the /usr/bin/network_tools file in the Traceroute Diagnostic Feature component, where manipulation of the url argument leads to command injection. The attack may be initiated remotely and the exploit has been disclosed publicly.
Original NVD description (English source)
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manipulation of the argument wan_num leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.