Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Netcore — Vulnerabilities & Security Advisories 56

Browse all 56 CVE security advisories affecting Netcore. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Netcore provides email marketing and customer engagement solutions, enabling businesses to manage email campaigns and customer communications. Historically, the platform has been susceptible to various vulnerability classes, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation, with four CVEs documented to date. These vulnerabilities often stem from insufficient input validation and improper access controls in web interfaces and APIs. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates ongoing security challenges that require continuous patching and robust input sanitization to prevent potential exploitation by malicious actors.

CVE ID Title CVSS Severity Published
CVE-2026-108932 Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting — NR268 CWE-79 4.3 Medium 2026-10-12
CVE-2026-108931 Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting — NR268 CWE-79 4.3 Medium 2026-10-12
CVE-2026-108930 Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure — NR268 CWE-200 2.7 Low 2026-10-12
CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection — NR268 CWE-88 9.9 Critical 2026-10-12
CVE-2026-108909 Netcore NR268 CGI Endpoint cross-site request forgery — NR268 CWE-352 4.3 Medium 2026-10-12
CVE-2026-108908 Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scripting — NR268 CWE-79 2.4 Low 2026-10-12
CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication — NR268 CWE-287 10.0 Critical 2026-10-12
CVE-2026-108906 Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds — NR268 CWE-125 7.2 High 2026-10-12
CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key — NAP930 CWE-321 2.7 Low 2026-09-29
CVE-2026-102240 Netcore NAP930 Network Tools CGI network_tools eval os command injection — NAP930 CWE-78 10.0 Critical 2026-09-29
CVE-2026-101188 Netcore POWER13 ubus routerd.passwd_set password recovery — POWER13 CWE-640 8.3 High 2026-09-28
CVE-2026-101077 Netcore NR289-GE boa_temp process_request missing authentication — NR289-GE CWE-306 10.0 Critical 2026-09-28
CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection — NR289-GE CWE-78 10.0 Critical 2026-09-28
CVE-2026-101075 Netcore NR289-GE Location Time location_time.cgi system os command injection — NR289-GE CWE-78 10.0 Critical 2026-09-28
CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow — NR289-GE CWE-121 9.8 Critical 2026-09-28
CVE-2026-101073 Netcore NR289-GE CGI Dispatcher boa improper authentication — NR289-GE CWE-287 8.3 High 2026-09-28
CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection — NR289-GE CWE-78 10.0 Critical 2026-09-28
CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection — NBR200V2 CWE-78 9.9 Critical 2026-09-28
CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection — NBR200V2 CWE-78 10.0 Critical 2026-09-28
CVE-2026-101000 Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization — NBR100V2 CWE-862 10.0 Critical 2026-09-28
CVE-2026-94101 Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow — NBR200V2 CWE-120 9.9 Critical 2026-09-21
CVE-2026-94100 Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow — NBR200V2 CWE-120 9.9 Critical 2026-09-21
CVE-2026-94099 Netcore NBR200V2 Backup Restore restore.cgi command injection — NBR200V2 CWE-77 9.9 Critical 2026-09-21
CVE-2026-94098 Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection — NBR200V2 CWE-77 9.1 Critical 2026-09-21
CVE-2026-94097 Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection — NBR200V2 CWE-77 10.0 Critical 2026-09-20
CVE-2026-94096 Netcore NBR200V2 LAN IP Configuration network_tools command injection — NBR200V2 CWE-77 9.9 Critical 2026-09-20
CVE-2026-94095 Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection — NBR200V2 CWE-77 9.9 Critical 2026-09-20
CVE-2026-92256 Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-92257 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-92255 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse — NR255-V CWE-125 5.4 Medium 2026-09-15

This page lists every published CVE security advisory associated with Netcore. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.