{"schema_version":1,"title":"Netcore NR268 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Netcore NR268: 0 in the last 7 days and 8 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-108932, was published on 12 October 2026. 6 vulnerabilities in the last four weeks, up 200% on the four before (2). 2 critical against 0.","url":"https://junglewise.ai/threats/technologies/nr268","json_url":"https://junglewise.ai/threats/technologies/nr268.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/nr268","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":3,"all_time":8,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":8,"last_365_days":8},"latest":[{"cve":"CVE-2026-108932","cvss":4.3,"epss":0.0026,"slug":"cve-2026-108932-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 stored XSS in DHCP Hostname Handler","severity":"medium","exploited":false,"published_at":"2026-10-12T22:17:03.43+00:00","url":"https://junglewise.ai/threats/cve-2026-108932-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-108931","cvss":4.3,"epss":0.0026,"slug":"cve-2026-108931-a-vulnerability-was-found-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 stored cross-site scripting in DHCP handler","severity":"medium","exploited":false,"published_at":"2026-10-12T21:17:09.773+00:00","url":"https://junglewise.ai/threats/cve-2026-108931-a-vulnerability-was-found-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-108929","cvss":9.9,"epss":0.0043,"slug":"cve-2026-108929-a-flaw-has-been-found-in-netcore-nr268-1-7-121109-the-affected","title":"Netcore NR268 DDNS argument injection","severity":"critical","exploited":false,"published_at":"2026-10-12T21:17:09.41+00:00","url":"https://junglewise.ai/threats/cve-2026-108929-a-flaw-has-been-found-in-netcore-nr268-1-7-121109-the-affected"},{"cve":"CVE-2026-108909","cvss":4.3,"epss":0.0021,"slug":"cve-2026-108909-a-security-flaw-has-been-discovered-in-netcore-nr268-1-7-121109","title":"Netcore NR268 cross-site request forgery in CGI endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:13.717+00:00","url":"https://junglewise.ai/threats/cve-2026-108909-a-security-flaw-has-been-discovered-in-netcore-nr268-1-7-121109"},{"cve":"CVE-2026-108907","cvss":10,"epss":0.0123,"slug":"cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109","title":"Netcore NR268 authentication bypass in CGI execution","severity":"critical","exploited":false,"published_at":"2026-10-12T17:17:13.373+00:00","url":"https://junglewise.ai/threats/cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109"},{"cve":"CVE-2026-108906","cvss":7.2,"epss":0.0043,"slug":"cve-2026-108906-a-vulnerability-has-been-found-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 out-of-bounds read in ARP filter upload","severity":"high","exploited":false,"published_at":"2026-10-12T16:17:03.917+00:00","url":"https://junglewise.ai/threats/cve-2026-108906-a-vulnerability-has-been-found-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-76853","cvss":8.1,"epss":0.0026,"slug":"cve-2026-76853-netcore-nr268-security-check-bypass-in-parame-put-file-cgi","title":"Netcore NR268 security check bypass in parame_put_file.cgi","severity":"high","exploited":false,"published_at":"2026-09-15T22:16:59.07+00:00","url":"https://junglewise.ai/threats/cve-2026-76853-netcore-nr268-security-check-bypass-in-parame-put-file-cgi"},{"cve":"CVE-2026-76852","cvss":8.8,"epss":0.0027,"slug":"cve-2026-76852-netcore-nr268-firmware-integrity-verification-bypass-in-mtd-write","title":"Netcore NR268 firmware integrity verification bypass in mtd_write","severity":"high","exploited":false,"published_at":"2026-09-15T22:16:58.887+00:00","url":"https://junglewise.ai/threats/cve-2026-76852-netcore-nr268-firmware-integrity-verification-bypass-in-mtd-write"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":2,"exploited":0,"vulnerabilities":6},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Netcore NR255-V","slug":"nr255-v","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/nr255-v"},{"name":"Netcore NBR200V2","slug":"nbr200v2","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/nbr200v2"},{"name":"Netcore NR289-GE","slug":"nr289-ge","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/nr289-ge"},{"name":"Netcore NR256CN","slug":"nr256cn","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/nr256cn"}],"technology":{"hub":true,"name":"Netcore NR268","slug":"nr268","vendor":{"hub":true,"name":"Netcore","slug":"netcore","url":"https://junglewise.ai/threats/vendors/netcore"},"aliases":[],"category":"firmware","url":"https://junglewise.ai/threats/technologies/nr268"},"most_severe":[{"cve":"CVE-2026-108907","cvss":10,"epss":0.0123,"slug":"cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109","title":"Netcore NR268 authentication bypass in CGI execution","severity":"critical","exploited":false,"published_at":"2026-10-12T17:17:13.373+00:00","url":"https://junglewise.ai/threats/cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109"},{"cve":"CVE-2026-108929","cvss":9.9,"epss":0.0043,"slug":"cve-2026-108929-a-flaw-has-been-found-in-netcore-nr268-1-7-121109-the-affected","title":"Netcore NR268 DDNS argument injection","severity":"critical","exploited":false,"published_at":"2026-10-12T21:17:09.41+00:00","url":"https://junglewise.ai/threats/cve-2026-108929-a-flaw-has-been-found-in-netcore-nr268-1-7-121109-the-affected"},{"cve":"CVE-2026-76852","cvss":8.8,"epss":0.0027,"slug":"cve-2026-76852-netcore-nr268-firmware-integrity-verification-bypass-in-mtd-write","title":"Netcore NR268 firmware integrity verification bypass in mtd_write","severity":"high","exploited":false,"published_at":"2026-09-15T22:16:58.887+00:00","url":"https://junglewise.ai/threats/cve-2026-76852-netcore-nr268-firmware-integrity-verification-bypass-in-mtd-write"},{"cve":"CVE-2026-76853","cvss":8.1,"epss":0.0026,"slug":"cve-2026-76853-netcore-nr268-security-check-bypass-in-parame-put-file-cgi","title":"Netcore NR268 security check bypass in parame_put_file.cgi","severity":"high","exploited":false,"published_at":"2026-09-15T22:16:59.07+00:00","url":"https://junglewise.ai/threats/cve-2026-76853-netcore-nr268-security-check-bypass-in-parame-put-file-cgi"},{"cve":"CVE-2026-108906","cvss":7.2,"epss":0.0043,"slug":"cve-2026-108906-a-vulnerability-has-been-found-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 out-of-bounds read in ARP filter upload","severity":"high","exploited":false,"published_at":"2026-10-12T16:17:03.917+00:00","url":"https://junglewise.ai/threats/cve-2026-108906-a-vulnerability-has-been-found-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-108932","cvss":4.3,"epss":0.0026,"slug":"cve-2026-108932-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 stored XSS in DHCP Hostname Handler","severity":"medium","exploited":false,"published_at":"2026-10-12T22:17:03.43+00:00","url":"https://junglewise.ai/threats/cve-2026-108932-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-108931","cvss":4.3,"epss":0.0026,"slug":"cve-2026-108931-a-vulnerability-was-found-in-netcore-nr268-1-7-121109-this","title":"Netcore NR268 stored cross-site scripting in DHCP handler","severity":"medium","exploited":false,"published_at":"2026-10-12T21:17:09.773+00:00","url":"https://junglewise.ai/threats/cve-2026-108931-a-vulnerability-was-found-in-netcore-nr268-1-7-121109-this"},{"cve":"CVE-2026-108909","cvss":4.3,"epss":0.0021,"slug":"cve-2026-108909-a-security-flaw-has-been-discovered-in-netcore-nr268-1-7-121109","title":"Netcore NR268 cross-site request forgery in CGI endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:13.717+00:00","url":"https://junglewise.ai/threats/cve-2026-108909-a-security-flaw-has-been-discovered-in-netcore-nr268-1-7-121109"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}