CVE-2026-111712Medium· 6.5▾ SunlitNetcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths pre…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico route to invoke protected management handlers without credentials.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112016Medium· 6.5Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files
CVE-2026-111710High· 7.5Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
CVE-2026-111711Critical· 9.8Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers
CVE-2026-108932Medium· 4.3A vulnerability was determined in Netcore NR268 1.7.121109
CVE-2026-108931Medium· 4.3A vulnerability was found in Netcore NR268 1.7.121109
CVE-2026-108930Low· 2.7A vulnerability has been found in Netcore NR268 1.7.121109