EUVD Vulnerability Catalog
EUVD-2026-88315
Severity: CRITICAL
Base Score: 10
CVSS Version: 4.0
Vulnerability Description
A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Attack Requirements (AT): None
▪
Privileges Required (PR): None
▪
User Interaction (UI): None
▪
Vulnerability Confidentiality Impact (VC): High
▪
Vulnerability Integrity Impact (VI): High
▪
Vulnerability Availability Impact (VA): High
▪
Subsequent Confidentiality Impact (SC): High
▪
Subsequent Integrity Impact (SI): High
▪
Subsequent Availability Impact (SA): High
▪
E: P
Affected Vendors & Systems
Vendor
Netcore
References & Advisory Links
- https://vuldb.com/vuln/410946
- https://vuldb.com/vuln/410946/cti
- https://vuldb.com/cve/CVE-2026-101075
- https://vuldb.com/submit/929203
- https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NR289-GE_V1.4.5102%2C2018.06.1418_44%20Router/Netcore_NR289-GE_location_time_command_injection.md
- https://nvd.nist.gov/vuln/detail/CVE-2026-101075
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
VulDB
EPSS Probability
0
Known Aliases
GHSA-xcvp-vff4-7732
CVE-2026-101075
Published On
2026-09-28
Last Updated
2026-09-28