Critical severity9.9NVD Advisory· Published Oct 12, 2026

CVE-2026-108929

Description

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netcore/NR268llm-fuzzy
Range: 1.7.121109

Patches

Vulnerability mechanics

References

github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-ddns-argument-injection.mdnvd
vuldb.com/cve/CVE-2026-108929nvd
vuldb.com/submit/977178nvd
vuldb.com/vuln/416753nvd
vuldb.com/vuln/416753/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000