Netcore
32 CVEs tracked since 2026. Since Sep 2026, none of them reached CISA KEV.
Netcore CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-09 | 32 | 0 |
Products
The products that kept showing up in Netcore's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Netcore.
- CVE-2026-94101Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow9.9
- CVE-2026-94100Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow9.9
- CVE-2026-94099Netcore NBR200V2 Backup Restore restore.cgi command injection9.9
- CVE-2026-94098Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection9.1
- CVE-2026-94097Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection10.0
- CVE-2026-94096Netcore NBR200V2 LAN IP Configuration network_tools command injection9.9
- CVE-2026-94095Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection9.9
- CVE-2026-92257Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks5.4
- CVE-2026-92256Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers6.5
- CVE-2026-92255Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse5.4
- CVE-2026-76873Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields5.2
- CVE-2026-76872Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages5.4
- CVE-2026-76871Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers6.5
- CVE-2026-76870Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation7.1
- CVE-2026-76869Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi7.2
The record
- Peak rank
- #33 in Sep 2026
- Busiest month shown
- Sep 2026, 32 CVEs
- Months with a KEV entry
- 0 since Sep 2026
- Monthly snapshots
- 1 since 2026