CVE-2026-101000 | Netcore NBR100V2 1.3.240614.030928 ACL unauthenticated.json uci.apply section authorization

September 27, 2026 Yanac

A vulnerability marked as very critical has been reported in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization.

The identification of this vulnerability is CVE-2026-101000. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More