CVE-2026-101072Proof of concept (PoC) published · CISASuited to automated attack · CISA
Netcore NR289-GE CGI ap_ip.cgi system os command injection
CVSS score
10.0
EPSS probability
%2.0
Risk score
0.2
Published
14 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2026-108907
Netcore NR268 CGI Execution user_ok improper authentication
N
Patch status unknown
9.4
CVE-2026-108929
Netcore NR268 DDNS DDNSset.cgi execvp argument injection
N
Patch status unknown
8.6
CVE-2026-108906
Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds
N
Patch status unknown
5.3
CVE-2026-108932
Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scripting
N
Patch status unknown
5.3
CVE-2026-108931
Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting
N
Patch status unknown
5.3
CVE-2026-108909
Netcore NR268 CGI Endpoint cross-site request forgery
N
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-101072"