# CVE-2026-111710: Netcore NR256CN NULL pointer dereference in Boa web server

Source: https://junglewise.ai/threats/cve-2026-111710-netcore-nr256cn-through-1-5-140116-contains-a-null-pointer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-16. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-111710 · Severity: high · CVSS 7.5 · Published 2026-10-16

The Netcore NR256CN is a network router used to manage and secure small business networks. A vulnerability in its web-based management interface allows an unauthenticated attacker to crash the router's management service by sending a specially crafted login request, leaving administrators unable to access the device remotely until it is rebooted.

Technologies: [Netcore NR256CN](https://junglewise.ai/threats/technologies/nr256cn). Vendors: [Netcore](https://junglewise.ai/threats/vendors/netcore).

## Quick answers

**Is CVE-2026-111710 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-111710 being exploited in the wild.

**How severe is CVE-2026-111710?** High severity, with a CVSS score of 7.5, published 16 October 2026.

**Which products and versions are affected?** Netcore NR256CN through 1.5.140116.

**Is there a fix for CVE-2026-111710?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-111710 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-111710?** Check whether you run Netcore NR256CN at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Boa web server in affected versions contains a NULL pointer dereference in the user_auth() function when parsing Basic Authentication headers. The vulnerability occurs because the function uses strchr() to find a colon in the decoded authorization value without validating that the colon exists; a malformed header lacking a colon causes a NULL pointer write before authentication failure handling executes. An unauthenticated attacker on the network can trigger a denial-of-service crash by sending this crafted request to protected routes.

## Affected products

- Netcore NR256CN through 1.5.140116

## Timeline

- 2026-10-16: disclosed

## References

- [https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-basic-auth-null-deref.md](https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-basic-auth-null-deref.md)
- [https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-boa-web-server-null-pointer-dereference-dos](https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-boa-web-server-null-pointer-dereference-dos)

## Related threats

- [Netcore NR256CN unauthenticated file write in Boa web server](https://junglewise.ai/threats/cve-2026-112016-netcore-nr256cn-through-1-5-140116-contains-an-unauthenticated)
- [Netcore NR256CN authentication bypass via CGI path prefix](https://junglewise.ai/threats/cve-2026-111712-netcore-nr256cn-through-1-5-140116-contains-an-authentication)
- [Netcore NR256CN stack overflow in Boa web server user authentication](https://junglewise.ai/threats/cve-2026-111711-netcore-nr256cn-through-1-5-140116-contains-a-pre-authentication)