CVE-2026-111710High· 7.5▾ TwilightNetcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers c…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a single character, to protected routes like /router/get_user_type.cgi to kill the main Boa process and deny management interface access.
NR256CN <= 1.5.140116Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111711Critical· 9.8Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
CVE-2026-111712Medium· 6.5Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix
CVE-2026-76868Medium· 4.9Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a missing exit_port parameter
CVE-2026-76865Medium· 4.9Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi.c due to unchecked atoi() results
CVE-2026-108932Medium· 4.3A vulnerability was determined in Netcore NR268 1.7.121109
CVE-2026-108931Medium· 4.3A vulnerability was found in Netcore NR268 1.7.121109