CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-101076 — A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the func...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of the argument ntp_ip results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of the argument ntp_ip results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 10. Published: 2026-09-28T16:17:11.947.

Indicators of Compromise (1)

CVE (1)
CVE-2026-101076
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Nubank rejects Monzo takeover talk

Brazilian digital banking giant Nubank has denied that it is pursuing a $10 billion takeover of Britain's Monzo.

Finextra
MEDIUMVulnerability

Stripe to buy embedded finance platform Parafin

Stripe has agreed to buy embedded financial products platform Parafin. Financial terms of the deal were not disclosed.

Finextra
MEDIUMVulnerability

Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass

Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. The post Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass appeared first on SecurityWeek .

SecurityWeek