CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-101001 — A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impac...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about thi

Analysis

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 10. Published: 2026-09-28T05:16:30.570.

Indicators of Compromise (1)

CVE (1)
CVE-2026-101001
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Visa and Lloyds complete live trials of stablecoin settlement

Visa and Lloyds Banking Group have completed a live pilot exploring how stablecoin-based settlement could support faster, more transparent and flexible cross-border transactions.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-102458 — EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. U...

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API.

CVE-2026-102458
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-102455 — EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability....

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

CVE-2026-102455
NIST NVD