Integer Overflow Vulnerability in Netcore NBR100V2 Product
CVE-2026-121382

8.7HIGH

Key Information:

Vendor

Netcore

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121382?

A vulnerability has been identified in the Netcore NBR100V2 that affects the function msg_aes_dec located in the /usr/bin/auto_ac file. This issue allows for integer overflow, which can be exploited remotely. The details of the exploit have been publicly disclosed, raising concerns about potential security risks. Despite early communication with the vendor, no response has been received, leaving users potentially exposed to exploitation.

Affected Version(s)

NBR100V2 1.3.240614.030928

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

xuanming (VulDB User)
VulDB CNA Team
.