VYPR

netcore-router-public-refs

by Lukadqq

CVEs (1)

  • CVE-2026-111712MedOct 16, 2026
    risk 0.42cvss 6.5epss —

    Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico…