CVE-2026-101000

Summary

The vulnerability allows remote attackers to bypass authorization by manipulating the argument section of the uci.apply function in the Netcore NBR100V2 1.3.240614.030928 device, leading to unauthorized access.

Exploitability

Exploitation is relatively straightforward given the public disclosure and the lack of vendor response. The attacker needs access to the network and knowledge of the specific manipulation required.

Blast radius

If exploited, this vulnerability could result in unauthorized access to the device's administrative functions, potentially leading to full control over the networked device.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Netcore NBR100V2 1.3.240614.030928 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.