Critical severity10.0NVD Advisory· Published Sep 29, 2026

CVE-2026-102240

Description

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netcore/NAP930llm-create
Range: 0.1.241010.141410
Senxitoyshuyi UI/HACKALLllm-fuzzy
Range: 0.1.241010.141410

Patches

Vulnerability mechanics

References

github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NAP930%20V0.1.241010.141410%20Router/NAP930_network_tools_command_injection.mdnvd
vuldb.com/cve/CVE-2026-102240nvd
vuldb.com/submit/931247nvd
vuldb.com/vuln/411139nvd
vuldb.com/vuln/411139/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000