Netcore Nap930 vulnerabilities

CVE-2026-102240 [CRITICAL] CWE-77 CVE-2026-102240: A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was c

CVE-2025-5145 [MEDIUM] CWE-74 CVE-2025-5145: A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The e

CVE-2025-5146 [MEDIUM] CWE-74 CVE-2025-5146: A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and N A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the argument pwd leads to command injection. The attack can be in

CVE-2026-102241 [LOW] CWE-320 CVE-2026-102241: A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unkno A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Restore. This manipulation of the argument aes_pass causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The exploit has been publicly d