CVE-2026-101076

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-74246

A flaw was found in Red Hat Quay's custom build trigger handler. This vulnerability allows a user with organization repository administrative privileges and the FEATUREBUILDSUPPORT enabled to read arbitrary files on the build worker. This is possible due to insufficient validation of the build...

CVE-2026-101075

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

EUVD-2026-88319

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function processrequest of the component boatemp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contact...

CVE-2026-101077

The Netcore NR289-GE (version 1.4.5102 ) is vulnerable to a missing authentication flaw within the boa_temp Handler component, specifically affecting the process_request function. This vulnerability allows for remote exploitation, potentially leading to high impact on confidentiality, integrity, ...

EUVD-2026-88317

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076

The Netcore NR289-GE (version 1.4.5102) is susceptible to a remote OS command injection vulnerability in the CGI Handler component. Specifically, the system function within the /set_ntp_server_ip.cgi file fails to properly sanitize the ntp_ip argument, allowing an attacker to execute arbitrary co...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101075

A critical OS command injection vulnerability exists in Netcore NR289-GE 1.4.5102 within the Location Time Handler component. The flaw resides in the system function of the /location_time.cgi file, where manipulating the mac argument allows for remote code execution. Public exploits for this vuln...

EUVD-2026-88315

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

CVE-2026-101075 Netcore NR289-GE Location Time location_time.cgi system os command injection

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

CVE-2026-101075 Netcore NR289-GE Location Time location_time.cgi system os command injection

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /locationtime.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is...

CVE-2026-101072

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072

A vulnerability exists in Netcore NR289-GE 1.4.5102 within the CGI Handler component. Specifically, the /ap_ip.cgi file fails to properly handle the ip argument, which can lead to remote OS command injection . This vulnerability can be exploited over the network. An exploit is publicly available ...

EUVD-2026-88289

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101069

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101069

A path traversal vulnerability exists in dbgate versions up to 7.3.1 . The flaw is located within the Export Handler component, specifically in the exportModelSql function of the file packages/api/src/controllers/databaseConnections.js. By manipulating the outputFile argument, an attacker can per...