Vulnerabilidades em Netcore
61 resultadosAnálise Vexday
Netcore possui 4 vulnerabilidades cadastradas, nenhuma com evidência de ataque ativo ou classificação crítica, e nenhuma publicada recentemente. A fraqueza dominante identificada é CWE-77 (Improper Neutralization of Special Elements used in a Command), indicando risco de injeção de comando que requer atenção em ciclos regulares de correção, mas sem pressão imediata de exploit.
CVE-2026-121382HIGHNetcore NBR100V2 auto_ac msg_aes_dec integer overflowEPSS 0.6%CVE-2026-76866HIGHNetcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS ParametersEPSS 0.6%CVE-2026-76869HIGHNetcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgiEPSS 0.6%CVE-2026-76860HIGHNetcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID TokenizationEPSS 0.5%CVE-2026-76862HIGHNetcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch PathsEPSS 0.5%CVE-2026-101000CRITICALNetcore NBR100V2 ACL unauthenticated.json uci.apply authorizationEPSS 0.5%CVE-2026-111711CRITICALNetcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()EPSS 0.5%CVE-2026-76865MEDIUMNetcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter HandlersEPSS 0.5%CVE-2026-76868MEDIUMNetcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_portEPSS 0.5%CVE-2026-94101CRITICALNetcore NBR200V2 routerd vlan_load_form_uci buffer overflowEPSS 0.4%CVE-2026-101188MEDIUMNetcore POWER13 ubus routerd.passwd_set password recoveryEPSS 0.4%CVE-2026-108929CRITICALNetcore NR268 DDNS DDNSset.cgi execvp argument injectionEPSS 0.4%CVE-2026-108906HIGHNetcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-boundsEPSS 0.4%CVE-2026-76870HIGHNetcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload ValidationEPSS 0.4%CVE-2026-76855HIGHNetcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit EndpointsEPSS 0.4%CVE-2026-76854HIGHNetcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgiEPSS 0.4%CVE-2026-101073MEDIUMNetcore NR289-GE CGI Dispatcher boa improper authenticationEPSS 0.4%CVE-2026-92256HIGHNetcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read HandlersEPSS 0.4%CVE-2026-76859HIGHNetcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgiEPSS 0.4%CVE-2026-76871HIGHNetcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read HandlersEPSS 0.4%