CVE-2026-94095 | Netcore NBR200V2 1.3.241127.071246 Traceroute Diagnostic Feature /usr/bin/network_tools url command injection

September 20, 2026 Yanac

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. It has been rated as very critical. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection.

This vulnerability is listed as CVE-2026-94095. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More