VulnSocial

CVE-2026-94100Disclosure

LOWCVSS 8.6 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-21); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-21: 1Mentions · 2026-10-21: 1PoC Mentioned / Linked · 2026-10-21: 1Patch / Workaround · 2026-10-21: 1Technical Details · 2026-09-21: 1Technical Details · 2026-10-21: 109-2110-21
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-211
Disclosure1
2026-10-211
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    PoC

    CVE-2026-94100: buffer overflow in Netcore NBR200V2 WAN VLAN config, remote, public exploit out, no vendor response, CVSS 9.9 and still unpatched. Isolate affected routers now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94100 #Netcore #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet announces CVE-2026-94100, a remote buffer overflow in Netcore NBR200V2 with CVSS 9.9, highlights that a public exploit is available and the vendor has not responded, and recommends isolating affected routers as an interim mitigation.

    0000037
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94100 A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN V… https://www.cve.org/CVERecord?id=CVE-2026-94100

    Post summary

    The text serves as a vulnerability disclosure announcement for CVE-2026-94100, providing specific technical details about the affected component and function in Netcore NBR200V2, without mentioning PoCs, exploits, active attacks, or patches.

    000001.4K
    58.1K followersView on X

Explore more

Back to dashboard