Netcore NR268 vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Latest Netcore NR268 vulnerabilities

CVE-2026-108932 — Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting (CVSS 4.3)
CVE-2026-108931 — Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting (CVSS 4.3)
CVE-2026-108930 — Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure (CVSS 2.7)
CVE-2026-108929 — Netcore NR268 DDNS DDNSset.cgi execvp argument injection (CVSS 9.9)
CVE-2026-108909 — Netcore NR268 CGI Endpoint cross-site request forgery (CVSS 4.3)
CVE-2026-108908 — Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting (CVSS 2.4)
CVE-2026-108907 — Netcore NR268 CGI Execution user_ok improper authentication (CVSS 10.0)
CVE-2026-108906 — Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds (CVSS 7.2)
CVE-2026-76853 — Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi (CVSS 8.1)
CVE-2026-76852 — Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write (CVSS 8.8)