CVE-2026-108929 | Netcore NR268 1.7.121109 DDNS /router/DDNSset.cgi execvp hostname argument injection

October 11, 2026 Yanac

A vulnerability classified as very critical was found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection.

This vulnerability is tracked as CVE-2026-108929. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More