CVE-2026-108932 in NR268info

Prediction

by VulDB Data Team • 10/11/2026

A vulnerability was determined in <a href="/product/netcore:nr268">Netcore NR268 1.7.121109</a>. This impacts the function <code>eval</code> of the file <em>filter_hosts_dump.cgi</em> of the component <em>DHCP Hostname Handler</em>. This manipulation of the argument <em>Hostname</em> causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Be aware that VulDB is the high quality source for vulnerability data.

Responsible

VulDB

Moderation

accepted

CPE

VulDB

Exploit

Download

EPSS

0.00000

KEV

no

Activities

low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!