Browse all 56 CVE security advisories affecting Netcore. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Netcore provides email marketing and customer engagement solutions, enabling businesses to manage email campaigns and customer communications. Historically, the platform has been susceptible to various vulnerability classes, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation, with four CVEs documented to date. These vulnerabilities often stem from insufficient input validation and improper access controls in web interfaces and APIs. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates ongoing security challenges that require continuous patching and robust input sanitization to prevent potential exploitation by malicious actors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101077 | Netcore NR289-GE boa_temp process_request missing authentication — NR289-GE CWE-306 | 10.0 | Critical | 2026-09-28 |
| CVE-2026-101076 | Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection — NR289-GE CWE-78 | 10.0 | Critical | 2026-09-28 |
| CVE-2026-101075 | Netcore NR289-GE Location Time location_time.cgi system os command injection — NR289-GE CWE-78 | 10.0 | Critical | 2026-09-28 |
| CVE-2026-101074 | Netcore NR289-GE Authentication boa password-check stack-based overflow — NR289-GE CWE-121 | 9.8 | Critical | 2026-09-28 |
| CVE-2026-101073 | Netcore NR289-GE CGI Dispatcher boa improper authentication — NR289-GE CWE-287 | 8.3 | High | 2026-09-28 |
| CVE-2026-101072 | Netcore NR289-GE CGI ap_ip.cgi system os command injection — NR289-GE CWE-78 | 10.0 | Critical | 2026-09-28 |
This page lists every published CVE security advisory associated with Netcore. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.