CVE-2026-94096: Netcore NBR200V2 LAN IP Configuration network_tools command injection
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block remote access to the device to mitigate the remotely exploitable command injection in /usr/bin/network_tools (LAN IP Configuration Handler).
- Compensating control
Restrict access to the LAN IP Configuration Handler / management interface to trusted IPs only (network ACL/firewall), since exploitation may be launched remotely via manipulation of the ipv4 argument.
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates low privileges are required (PR:L). The attack can be launched remotely and does not require user interaction (UI:N).
Which version is identified as affected?
The reported affected version is Netcore NBR200V2 1.3.241127.071246. The provided information does not establish whether other versions are affected.
How likely is active exploitation?
A public exploit has been disclosed and could be used. The vulnerability is rated critical with a 9.9 CVSS score and can affect confidentiality, integrity, and availability.