CVE-2026-101000
🗓️ 28 Sep 2026 04:45:11Reported by VulDBType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 45 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2026-101000 | 27 Sep 202610:47 | – | circl |
 | CVE-2026-101000 Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization | 28 Sep 202604:45 | – | cvelist |
 | EUVD-2026-88082 | 28 Sep 202604:45 | – | euvd |
 | Netcore NBR100V2 CVE-2026-101000 Detect | 29 Sep 202610:07 | – | kittysploit |
 | CVE-2026-101000 | 28 Sep 202605:16 | – | nvd |
 | PT-2026-99546 | 27 Sep 202600:00 | – | ptsecurity |
 | CVE-2026-101000: Missing Authorization | 28 Sep 202600:00 | – | rapid7 |
 | CVE-2026-101000 Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization | 28 Sep 202604:45 | – | vulnrichment |
[
{
"vendor": "Netcore",
"product": "NBR100V2",
"versions": [
{
"version": "1.3.240614.030928",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:netcore:nbr100v2:*:*:*:*:*:*:*:*"
],
"modules": [
"ACL Handler"
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| jsonrpc | request body | /ubus | Unauthenticated ubus sessions may call uci.get on permitted configs via POST /ubus when the device is factory-default. | CWE-862, CWE-863 |
| id | request body | /ubus | Unauthenticated ubus sessions may call uci.get on permitted configs via POST /ubus when the device is factory-default. | CWE-862, CWE-863 |
| method | request body | /ubus | Unauthenticated ubus sessions may call uci.get on permitted configs via POST /ubus when the device is factory-default. | CWE-862, CWE-863 |
| params | request body | /ubus | Unauthenticated ubus sessions may call uci.get on permitted configs via POST /ubus when the device is factory-default. | CWE-862, CWE-863 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Oct 2026 15:17Current
8.3High risk
Vulners AI Score8.3
CVSS 410
CVSS 3.110
CVSS 310
CVSS 210
EPSS0.00501
SSVC