Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.9
CVE-2026-101074: Netcore NR289-GE remote code risk via login
CVE-2026-101074 · published 21 days ago
Summary
The login program in Netcore NR289-GE version 1.4.5102 can be tricked into overflowing its memory when a crafted username is supplied. This could let an attacker run their own code from afar. Apply the vendor’s update or disable the affected login component until a patch is available.
Original advisory text
A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of th...
A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-119Buffer Overflow
CWE-121Stack-based Buffer Overflow
Timeline
Published28 Sep 2026
Updated19 Oct 2026
First seen28 Sep 2026
Sources
CVE-2026-101074 · NVD
Track software like this
Free during beta