CVE-2026-112016Medium· 6.5▾ SunlitNetcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existe…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into /tmp/boa_temp.update or /tmp/boa_temp.para, tampering with pending firmware updates or configuration restores or causing denial of service.
NR256CN <= 1.5.140116Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111710High· 7.5Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
CVE-2026-111711Critical· 9.8Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
CVE-2026-111712Medium· 6.5Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path Prefix
CVE-2026-101077Critical· 10.0A flaw has been found in Netcore NR289-GE 1.4.5102
CVE-2026-108932Medium· 4.3A vulnerability was determined in Netcore NR268 1.7.121109
CVE-2026-108931Medium· 4.3A vulnerability was found in Netcore NR268 1.7.121109