This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-111712 | BDVDB-2026-390641 Detail

NetcoreNR256CN

Description#

Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico route to invoke protected management handlers without credentials.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-288 Authentication Bypass Using an Alternate Path or Channel

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.