Netcore NR289-GE CVE-2026-101077 Auth Bypass Detect

Detects CVE-2026-101077 in Netcore NR289-GE firmware V1.4.5102: the vendor boa web server whitelists any URI containing '.ico', skipping HTTP Basic authentication for all 441 cgitest.cgi handlers. Compares unauthenticated POST to /x.ico/aplistshow.cgi vs the protected path. !/usr/bin/env python3 ...