{"id":"CVE-2026-108906","state":"PUBLISHED","title":"Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds","description":"A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the argument put_file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-10-12T16:00:15.070Z","updatedAt":"2026-10-15T02:26:24.557Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Netcore NR268"],"affected":[{"vendor":"Netcore","product":"NR268","versions":[{"version":"1.7.121109","status":"affected"}],"cpes":["cpe:2.3:a:netcore:nr268:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/416700","https://vuldb.com/vuln/416700/cti","https://vuldb.com/cve/CVE-2026-108906","https://vuldb.com/submit/977172","https://github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-arp-import-overread.md"],"weaknesses":["CWE-125","CWE-119"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/108xxx/CVE-2026-108906.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-108906","state":"PUBLISHED","datePublished":"2026-10-12T16:00:15.070Z","dateUpdated":"2026-10-15T02:26:24.557Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-11T14:55:10.750Z"},"containers":{"cna":{"title":"Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds","descriptions":[{"lang":"en","value":"A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the argument put_file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Netcore","product":"NR268","versions":[{"version":"1.7.121109","status":"affected"}],"cpes":["cpe:2.3:a:netcore:nr268:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/416700","name":"VDB-416700 | Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-bounds","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/416700/cti","name":"VDB-416700 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-108906","name":"CVE-2026-108906 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/977172","name":"Submit #977172 | Netcore NR268 Router NR268-V1.7.121109.bin Out-of-Bounds Read","tags":["third-party-advisory"]},{"url":"https://github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-arp-import-overread.md","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.6,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":7.2,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.2,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":8.3,"vectorString":"AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","type":"CWE","lang":"en","description":"Out-of-Bounds Read"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-10-12T16:00:15.070Z"},"timeline":[{"time":"2026-10-11T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-11T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-11T17:00:34.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"nebula (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202610"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-15T02:26:14.963127Z","id":"CVE-2026-108906","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-15T02:26:24.557Z"}}]}}}