OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-101077

CRITICAL · CVSS 10 EPSS 0.71% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-28 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

A critical vulnerability exists in the Netcore NR289-GE 1.4.5102, specifically within the process_request function of the boa_temp Handler, leading to missing authentication. This flaw allows for remote exploitation, potentially enabling unauthorized access to sensitive functions. Organizations using this product should prioritize immediate remediation efforts to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-101077
Severity
CRITICAL
CVSS
10
EPSS
0.71%

Original NVD Description

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.