MEDIUM 6.9 NVD
CVE-2026-111712
Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handl
Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico route to invoke protected management handlers without credentials.
References
- https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2a
- https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-authentication-byp
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-16 via NVD.
vulnfeed aggregates 16467 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.