CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-101000 — A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affec...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted ear

Analysis

A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 10. Published: 2026-09-28T05:16:30.270.

Indicators of Compromise (1)

CVE (1)
CVE-2026-101000
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 28, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

CISA orders feds to patch exploited Citrix flaws by Wednesday

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities. [...]

BleepingComputer
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-101002 — A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affec...

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early

CVE-2026-101002
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-101001 — A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impac...

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about thi

CVE-2026-101001
NIST NVD