Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-76852

Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write

Description

Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.cgi and check_image_uuid.c to bypass firmware signature validation and load unauthorized firmware images.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netcore NR268

Default version status: unaffected

  • 1.7.121109affected

References