Is CVE-2026-78796 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-78796 being exploited in the wild.

How severe is CVE-2026-78796?

Informational severity, published 9 October 2026.

Which products and versions are affected?

Netcore B11 Router v1.3.241114.024540 and earlier; Netcore B6 Router v1.3.241114.024540 and earlier; Netcore NBR100 Router v1.3.241114.024540 and earlier.

Is there a fix for CVE-2026-78796?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-78796 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-78796?

Check whether you run Netcore B11 Router, Netcore B6 Router or Netcore NBR100 Router at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-78796: Netcore B6/B11/NBR100 router unauthenticated remote code execution

CVE-2026-78796 · Severity: info · Published 2026-10-09

Netcore enterprise wireless routers contain a vulnerability in their firmware that allows an attacker on the network to execute arbitrary commands without authentication. An attacker can exploit a flaw in the web interface to gain complete control of the device, potentially allowing them to intercept traffic, modify network settings, or launch attacks on connected devices.

Vendors: Netcore.

Quick answers

Is CVE-2026-78796 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-78796 being exploited in the wild.
How severe is CVE-2026-78796?: Informational severity, published 9 October 2026.
Which products and versions are affected?: Netcore B11 Router v1.3.241114.024540 and earlier; Netcore B6 Router v1.3.241114.024540 and earlier; Netcore NBR100 Router v1.3.241114.024540 and earlier.
Is there a fix for CVE-2026-78796?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-78796 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-78796?: Check whether you run Netcore B11 Router, Netcore B6 Router or Netcore NBR100 Router at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the CGI upgrade script (www/cgi-bin/upgrade) on Netcore routers running firmware v1.3.241114.024540 and earlier. The script performs insufficient input validation on query parameters and uses eval() to process them, allowing unauthenticated command injection. An attacker can bypass character filters using decimal IP encoding and other techniques to execute arbitrary shell commands remotely without requiring authentication.

Affected products

Netcore B6 Router v1.3.241114.024540 and earlier
Netcore B11 Router v1.3.241114.024540 and earlier
Netcore NBR100 Router v1.3.241114.024540 and earlier

Timeline

2026-05-07: other: Vulnerability discovered during security testing
2026-06-12: other: CVE requested from MITRE
2026-09-14: disclosed: Publicly disclosed after vendor contact attempts received no response
2026-10-09: advisory: CVE-2026-78796 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.