#NetCore
LightNews LightNews
cve.skyfleet.blue
CVE-2026-121382 - Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
CVE ID : CVE-2026-121382

Published : Nov. 3, 2026, 6:45 p.m. | 19 minutes ago

Description : A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the functio...
CVE-2026-121382 - Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msg_aes_dec of the file /usr/bin/auto_ac. This manipulation causes integer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure …
cvefeed.io
November 3, 2026 at 7:47 PM
euvd-bot.bsky.social
🚨 EUVD-2026-116139
📊 8.7/10
🏢 Netcore

📝 A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msg_aes_dec of the file /usr/bin/auto_ac. T...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116139

#cybersecurity #infosec #cve #euvd
November 3, 2026 at 8:03 PM
solenoid-ngc.bsky.social
Solenoid 1.6 (Rust port) also now uses netcore-rs, which is a Rust port of the engine core of rete.js .
November 3, 2026 at 3:16 PM
legacy-it-tan.bsky.social
#プログラミング言語・ランキング

2020年 HackerRank社
https://proengineer.internous....
世界10万人以上に学びたいWebフレームワークを尋ねたランキング
1 React
2 AngularJS
3 Django
4 Vue.js
5 Ruby on Rails
6 Spark
7 Spring
8 ExpressJS
9 .NETCore
10 Backbone.js
https://bsky.app/profile/legac...
November 4, 2026 at 12:08 AM
ryuji-htosscom.bsky.social
.netCore自作ライブラリのnamespaceが浸透しない（VS2022）
https://h-toss.com/netcore%e8%87%aa%e4%bd%9c%e3%83%a9%e3%82%a4%e3%83%96%e3%83%a9%e3%83%aa%e3%81%aenamespace%e3%81%8c%e6%b5%b8%e9%80%8f%e3%81%97%e3%81%aa%e3%81%84%ef%bc%88vs2022%ef%bc%89/
#システムエンジニア
October 22, 2026 at 10:20 AM
hugovalters.bsky.social
CVE-2026-94098: command injection in Netcore NBR200V2 firmware upgrade endpoint, CVSS 9.1, remotely exploitable, public exploit, no vendor patch. Isolate devices and restrict admin access now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94098/
October 21, 2026 at 12:10 PM
hugovalters.bsky.social
CVE-2026-94100: buffer overflow in Netcore NBR200V2 WAN VLAN config, remote, public exploit out, no vendor response, CVSS 9.9 and still unpatched. Isolate affected routers now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94100/
October 21, 2026 at 5:50 AM
hugovalters.bsky.social
CVE-2026-94096: command injection in Netcore NBR200V2 LAN IP config, CVSS 9.9. Public exploit, no vendor response, unpatched. Patch or isolate now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94096/
October 20, 2026 at 8:00 AM
hugovalters.bsky.social
CVE-2026-94095: command injection in Netcore NBR200V2 traceroute feature, CVSS 9.9, remotely exploitable, public exploit out, vendor unresponsive and unpatched. Restrict exposure and mitigate now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94095/
October 20, 2026 at 6:20 AM
hugovalters.bsky.social
CVE-2026-94101: buffer overflow in Netcore NBR200V2 routerd (wan_num arg), remotely exploitable, public exploit out, vendor unresponsive. CVSS 9.9. Unpatched, no fix. Restrict exposure and monitor. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94101/
October 20, 2026 at 4:50 AM
hugovalters.bsky.social
CVE-2026-94099: command injection in Netcore NBR200V2 backup restore (QUERY_STRING), CVSS 9.9, remote, public exploit, no vendor response and no patch. Restrict expose of restore.cgi at once. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94099/
October 19, 2026 at 5:50 PM
hugovalters.bsky.social
CVE-2026-94097: CVSS 10 command injection in Netcore NBR200V2 1.3.241127.071246 via the /www/cgi-bin/network_tools CGI endpoint. Public exploit, remote, unpatched, vendor silent. Isolate the device and watch for a fix. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94097/
October 19, 2026 at 4:20 PM
euvd-bot.bsky.social
🚨 EUVD-2026-103469
📊 6.9/10
🏢 Netcore

📝 Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attack...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103469

#cybersecurity #infosec #cve #euvd
October 18, 2026 at 1:03 PM
thehackerwire.bsky.social
🔴 CVE-2026-111711 - Critical (9.8)

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in ...

https://www.thehackerwire.com/vulnerability/CVE-2026-111711/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-111711 - Critical
October 17, 2026 at 5:06 PM
thehackerwire.bsky.social
🟠 CVE-2026-111710 - High (7.5)

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa w...

https://www.thehackerwire.com/vulnerability/CVE-2026-111710/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-111710 - High
October 17, 2026 at 2:51 PM
stackflag.bsky.social
CVE-2026-111711 - nr256cn
The web server built into Netcore NR256CN devices accepts a username without checking its length. An attacker who is not logged in can send a very long username to any /router/*.cgi…

Too many irrelevant or confusing CVEs? Use stackflag.com

#nr256cn #netcore #CVE #infosec
CVE-2026-111711: Netcore NR256CN can crash or be hijacked with long usernames
The web server built into Netcore NR256CN devices accepts a username without checking its length.
stackflag.com
October 16, 2026 at 9:10 PM
ransomware.live
According to Ransomware.live, thegentlemen ransomware group has added Netcore Unbxd (🇮🇳) to its victims.
October 16, 2026 at 9:37 AM
euvd-bot.bsky.social
🚨 EUVD-2026-103002
📊 8.7/10
🏢 Netcore

📝 Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenti...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103002

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 7:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-103004
📊 6.9/10
🏢 Netcore

📝 Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management C...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103004

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 7:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-103003
📊 9.3/10
🏢 Netcore

📝 Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies B...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103003

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 7:03 PM
ransomlook.bsky.social
New post from #The Gentlemen : Netcore Unbxd
More at : https://www.ransomlook.io/group/The%20Gentlemen #Ransomware
October 16, 2026 at 2:57 PM
cyberintelligence.bsky.social
🔴 Netcore Unbxd — listed by Thegentlemen

📍 India · Technology · 16 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.

https://cyberthreatintelligence.net/ransomware-victim/netcore-unbxd-thegentlemen-2026

#ransomware #thegentlemen #threatintel
Netcore Unbxd — Ransomware Attack by Thegentlemen
Based in India. Technology sector. Disclosed 16 Oct 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
October 16, 2026 at 11:07 AM
stemshop.bsky.social
🚨 CVE-2026-111711 — CVSS 9.3 CRITICAL

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa we...

🔎 https://stemshop.top/cve/CVE-2026-111711

#CVE #CyberSecurity #InfoSec
October 16, 2026 at 8:10 PM
cyberintelligence.bsky.social
🏢 Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and — its 2026 bet — a Shopping Agent (agentic commerce).
October 16, 2026 at 11:07 AM
devops-digest.com
2026年10月13日の重要脆弱性: EdimaxおよびNetcore製品など3件

2026年10月13日、EdimaxとNetcore製品でCVSS 10.0の重要脆弱性3件が公開されました。リモートからのコマンド実行や不適切な認証の危険性があり、即時対応が求められます。
2026年10月13日の重要脆弱性: EdimaxおよびNetcore製品など3件
2026年10月13日、EdimaxとNetcore製品でCVSS 10.0の重要脆弱性3件が公開されました。リモートからのコマンド実行や不適切な認証の危険性があり、即時対応が求められます。
vuln.devops-digest.com
October 13, 2026 at 7:17 AM