Critical severity10.0NVD Advisory· Published Sep 28, 2026

CVE-2026-101076

Description

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of the argument ntp_ip results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Senxitoyshuyi UI/HACKALLllm-fuzzy
Range: 1.4.5102
Netcore/NR289-GEllm-fuzzy
Range: 1.4.5102

Patches

Vulnerability mechanics

References

github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NR289-GE_V1.4.5102%2C2018.06.1418_44%20Router/Netcore_NR289-GE_set_ntp_server_ip_command_injection.mdnvd
vuldb.com/cve/CVE-2026-101076nvd
vuldb.com/submit/929204nvd
vuldb.com/vuln/410947nvd
vuldb.com/vuln/410947/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000