CVE-2026-101073: falha de média gravidade em Netcore NR289-GE
Netcore NR289-GE CGI Dispatcher boa improper authentication
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
Produtos afetados
Netcore · NR289-GEPoCs públicas encontradas — 1
cve_referencegithub.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NR289-GE_V1.4.5102%2C2018.06.1418_44%20Router/Netcore_NR289-GE_authentication_bypass.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Netcore NR289-GE
No mesmo produto, das mais perigosas para as menos.
CVE-2026-101075CRITICALNetcore NR289-GE Location Time location_time.cgi system os command injectionEPSS 2.0%CVE-2026-101076CRITICALNetcore NR289-GE CGI set_ntp_server_ip.cgi system os command injectionEPSS 2.0%CVE-2026-101072CRITICALNetcore NR289-GE CGI ap_ip.cgi system os command injectionEPSS 2.0%CVE-2026-101074CRITICALNetcore NR289-GE Authentication boa password-check stack-based overflowEPSS 0.8%CVE-2026-101077CRITICALNetcore NR289-GE boa_temp process_request missing authenticationEPSS 0.7%