Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-76071: Netis NC63 router firmware lets remote attacker run code

CVE-2026-76071 · published 10 days ago

Summary

The Netis NC63 router’s firmware up to version 3.0.0.3327 can be tricked into running malicious code when a specially crafted request is sent. An attacker does not need to log in and can gain full control of the device. Update the router to the latest firmware or replace it with a device that receives security updates.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
netis systems	nc63	<= 3.0.0.3327

Original advisory text

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf conversions that copy user-supplied input into fixed-size stack buffers before authentication is verified, achieving remote code execution as root due to the Boa web server executing the CGI environment with root privileges.

References

https://ozcanpng.dev/blog/cve-2026-76071-netis-nc63-ipfilter-stack-buffer-overfl... technical-description exploit
https://github.com/ozcanpng/CVE-2026-76071 technical-description exploit
https://www.netis-systems.com/products/NC63.html product
https://www.vulncheck.com/advisories/netis-nc63-stack-buffer-overflow-via-destho... third-party-advisory

Severity

9.3 Critical

CVSS 3.1: 9.8 (MITRE)

Exploitation

EPSS 1%

Type

CWE-121Stack-based Buffer Overflow

Timeline

Published24 Aug 2026

Updated2 Sep 2026

First seen24 Aug 2026

Sources

CVE-2026-76071 · NVD

CVE-2026-76071 · MITRE

Monitor software like this

Free during beta