VulnSocial

CVE-2026-94096General

MEDIUMCVSS 8.6 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-77

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-21); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-21: 1Mentions · 2026-10-20: 1PoC Mentioned / Linked · 2026-10-20: 1Exploit Tool / Code · 2026-10-20: 1Patch / Workaround · 2026-10-20: 1Technical Details · 2026-10-20: 109-2110-20
Signal classification2 categories
General
150.0%
Exploit
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-211
General1
2026-10-201
Exploit1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    Exploit

    CVE-2026-94096: command injection in Netcore NBR200V2 LAN IP config, CVSS 9.9. Public exploit, no vendor response, unpatched. Patch or isolate now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94096/ #Netcore #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The text discloses CVE-2026-94096, a CVSS 9.9 command injection vulnerability in Netcore NBR200V2, notes that a public exploit is available with no vendor response, and urges immediate patching or isolation.

    0000055
    1.1K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-94096 A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the compon… https://www.cve.org/CVERecord?id=CVE-2026-94096

    Post summary

    The post merely announces CVE-2026-94096 affecting a Netcore device and links to the official CVE record, without providing technical details, PoC, exploit, patch, or exploitation status.

    00000719
    58.1K followersView on X

Explore more

Back to dashboard