CVE-2026-94100
Received Received - Intake

Buffer Overflow in Netcore NBR200V2 WAN VLAN Reconfiguration

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: VulDB

Description
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-21
Last Modified
2026-09-21
Generated
2026-09-21
AI Q&A
2026-09-21
EPSS Evaluated
N/A
NVD
CVE-2026-94100
EUVD
EUVD-2026-83812

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
netcore nbr200v2 1.3.241127.071246

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in Netcore NBR200V2 version 1.3.241127.071246. It exists in the wan_config_set_vlan function of the file /usr/bin/routerd, specifically in the WAN VLAN Reconfiguration component. The issue arises when the vlan_wanX.ports argument is manipulated, leading to a buffer overflow. The vulnerability can be exploited remotely and a public exploit is available.

Detection Guidance

This vulnerability involves a buffer overflow in the WAN VLAN reconfiguration function of Netcore NBR200V2. Detection requires checking for unusual network traffic or malformed VLAN configuration requests targeting the /usr/bin/routerd process. Monitor logs for crashes or unexpected behavior in routerd. Inspect network packets for malformed vlan_wanX.ports arguments. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service on the affected device. Since it can be exploited remotely, attackers may gain control over the router without needing physical access. This could lead to network compromise, data interception, or disruption of services.

Compliance Impact

This vulnerability could potentially lead to unauthorized access or data breaches due to a buffer overflow in the WAN VLAN Reconfiguration function. Such incidents may violate compliance requirements under GDPR (data protection) or HIPAA (healthcare data security) if sensitive data is exposed or manipulated.

Mitigation Strategies

Immediately isolate affected Netcore NBR200V2 devices from the network to prevent remote exploitation. Disable WAN VLAN reconfiguration functionality if possible. Monitor network traffic for unusual activity targeting /usr/bin/routerd. Contact Netcore support for patches or updates. If no patch is available, consider replacing the device with a secure alternative.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94100. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart