CVE-2026-94100 Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wanconfigsetvlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlanwanX.ports can lead to buffer overflow. The attack may be performed...

CVE-2026-94100

A buffer overflow in the function wan_config_set_vlan within /usr/bin/routerd of the Netcore NBR200V2 (firmware 1.3.241127.071246) allows a remote attacker with low privileges to trigger a WAN VLAN Reconfiguration flaw by manipulating the vlan_wanX.ports argument. CVSS 3.1 scores the vulnerabilit...

EUVD-2026-83812

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wanconfigsetvlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlanwanX.ports can lead to buffer overflow. The attack may be performed...

CVE-2026-94100 Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wanconfigsetvlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlanwanX.ports can lead to buffer overflow. The attack may be performed...

CVE-2026-94095

A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/networktools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be...

CVE-2026-94096

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

CVE-2026-94097

A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/networktools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possibl...

CVE-2026-94099

A command injection vulnerability exists in Netcore NBR200V2 (version 1.3.241127.071246) within the Backup Restore component. Manipulating the QUERY_STRING argument of the restore.cgi file allows remote attackers to execute arbitrary commands. A proof-of-concept exploit has been released to the p...

CVE-2026-94099 Netcore NBR200V2 Backup Restore restore.cgi command injection

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERYSTRING results in command injection. The attack is possible to be carried o...

EUVD-2026-83811

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERYSTRING results in command injection. The attack is possible to be carried o...

CVE-2026-34197

CVE-2026-34197 描述 Apache ActiveMQ Broker、Apache ActiveMQ 中存在不当输入验证、代码生成控制不当（'代码注入'）漏洞。Apache ActiveMQ Classic 在 Web 控制台的 /api/jolokia/ 路径下暴露了 Jolokia JMX-HTTP 桥接。默认的 Jolokia 访问策略允许对所有 ActiveMQ MBean（org.apache.activemq:）执行 exec 操作，包括 BrokerService.addNetworkConnectorString 和...

CVE-2025-55182

CVE-2025-55182 — React2Shell 预认证远程代码执行漏洞，影响 React Server Components RSC、Next.js 及相关框架。 概述 CVE-2025-55182（又称 React2Shell ）是一个影响 React Server Components RSC 生态系统的严重预认证 RCE 漏洞。未认证的攻击者只需发送一个精心构造的 HTTP POST 请求即可完全攻陷易受攻击的服务器。 技术分析 根因 React Server Components 使用一种名为 React Flight...

CVE-2026-94098 Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERYSTRING leads to command injection. The attack can be executed...

EUVD-2026-83810

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERYSTRING leads to command injection. The attack can be executed...

CVE-2026-94098 Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERYSTRING leads to command injection. The attack can be executed...

CVE-2026-94098

A command injection vulnerability exists in the Netcore NBR200V2 router (firmware 1.3.241127.071246 ), specifically in the Firmware Upgrade CGI Endpoint at /www/cgi-bin/upgrade. An attacker can remotely exploit this by manipulating the QUERY_STRING argument, achieving high impact to confidentiali...

EUVD-2026-84191

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88407

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-93312

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...