CVE-2026-76853

Received Received - Intake

Netcore NR268 Firmware Security Check Bypass

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulnCheck

Description

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in put_parame_file_cgi.c to bypass restricted restore archive handling.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-05

NVD

CVE-2026-76853

EUVD

EUVD-2026-80056

Affected Vendors & Products

Vendor	Product	Version / Range
netcore	nr268	1.7.121109

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-353	The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.

Attack-Flow Graph

Executive Summary

This vulnerability is a security check bypass in Netcore NR268 firmware version 1.7.121109. It allows attackers to bypass restricted restore archive handling by exploiting a flawed prefix check in the put_parame_file_cgi.c component.

Detection Guidance

This vulnerability involves a security check bypass in Netcore NR268 firmware version 1.7.121109 during archive restoration. Detection requires checking for firmware version 1.7.121109 and verifying if the parame_put_file.cgi endpoint improperly handles restore archive prefixes. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this flaw to bypass security restrictions and potentially restore malicious configurations or firmware, leading to unauthorized access or system compromise. The impact includes high confidentiality and integrity risks as per CVSS scores.

Compliance Impact

This vulnerability allows attackers to bypass security checks during firmware restoration, potentially enabling unauthorized access or modification of device configurations. Such flaws could lead to violations of data integrity and confidentiality requirements in GDPR and HIPAA, as unauthorized changes may expose sensitive data or disrupt protected operations.

Mitigation Strategies

Immediately update the Netcore NR268 firmware to the latest version that addresses the prefix validation flaw in parame_put_file.cgi. Disable remote access to the restore archive functionality if not required. Monitor network traffic for unusual restore archive requests or file operations.

Hi! I’m here to help you understand CVE-2026-76853. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70