CVE-2026-101072 | Netcore NR289-GE 1.4.5102 CGI /ap_ip.cgi system ip os command injection

September 27, 2026 Yanac

A vulnerability classified as very critical was found in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-101072. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More