CVE-2026-111711

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's userok function, which copies Basic-auth usernames with unbounded strcpy calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to an...

EUVD-2026-103003

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's userok function, which copies Basic-auth usernames with unbounded strcpy calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to an...

CVE-2026-111711

Netcore NR256CN through 1.5.140116 are vulnerable to a pre-authentication stack overflow in the Boa web server 's user_ok() function. The root cause is the use of unbounded strcpy() calls to copy Basic-auth usernames into 64-byte stack buffers. An unauthenticated attacker can trigger this by send...

CVE-2026-111711 Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's userok function, which copies Basic-auth usernames with unbounded strcpy calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to an...

Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-108907

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...

CVE-2026-108907

A critical improper authentication vulnerability exists in Netcore NR268 version 1.7.121109 within the CGI Execution component. Specifically, a manipulation of the user_ok function allows for remote unauthorized access. The exploit has been publicly disclosed and may be utilized by attackers. Whi...

CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...

EUVD-2026-97677

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function userok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...

CVE-2019-8985: Missing Authentication for Critical Function

On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices possibly WF2411 through WF2880, there is a stack-based buffer overflow that does not require authentication. This can cause denial of service device restart or remote code execution. This vulnerability can be triggered by a GE...