CVE-2026-76852

Received Received - Intake

Improper Integrity Verification in Netcore NR268 Firmware

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulnCheck

Description

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.cgi and check_image_uuid.c to bypass firmware signature validation and load unauthorized firmware images.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76852

EUVD

EUVD-2026-80055

Affected Vendors & Products

Vendor	Product	Version / Range
netcore	nr268	1.7.121109

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-354	The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

Attack-Flow Graph

Executive Summary

This vulnerability involves Netcore NR268 firmware version 1.7.121109 having an improper integrity verification flaw in the mtd_write function. Attackers can exploit two specific CGI endpoints, put_file.cgi and check_image_uuid.c, to bypass firmware signature validation. This allows them to load unauthorized firmware images onto the device.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized firmware modifications or bypasses in Netcore NR268 devices. Monitor for unexpected firmware updates or unusual activity in mtd_write, put_file.cgi, or check_image_uuid.c. Inspect logs for signature validation failures or unauthorized access attempts.

Impact Analysis

If exploited, this vulnerability could allow attackers to install malicious firmware on your device. This could lead to unauthorized access, data theft, or complete control over the device. It may also disrupt device functionality or enable further attacks on connected systems.

Mitigation Strategies

Immediately update the Netcore NR268 firmware to the latest patched version. Disable unnecessary services like put_file.cgi and check_image_uuid.c if not required. Restrict network access to the device and monitor for suspicious firmware update attempts.

Hi! I’m here to help you understand CVE-2026-76852. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70