CVE-2026-101077Critical· 10.0▾ AbyssalPoC availableA flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The expl…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 55 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
NR289-GE 1.4.5102Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101073High· 8.3A security flaw has been discovered in Netcore NR289-GE 1.4.5102
CVE-2026-101074Critical· 9.8A weakness has been identified in Netcore NR289-GE 1.4.5102
CVE-2026-101072Critical· 10.0A vulnerability was identified in Netcore NR289-GE 1.4.5102
CVE-2026-101076Critical· 10.0Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
CVE-2026-101075Critical· 10.0A security vulnerability has been detected in Netcore NR289-GE 1.4.5102
CVE-2026-101004Medium· 5.3A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10