OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-94100

CRITICAL · CVSS 9.9 EPSS 0.80% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-21 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

A critical buffer overflow vulnerability exists in the WAN VLAN Reconfiguration function of the Netcore NBR200V2 router, specifically within the wan_config_set_vlan function. This flaw can be exploited remotely by manipulating the vlan_wanX.ports argument, potentially allowing attackers to execute arbitrary code. Organizations using this router model should prioritize immediate remediation, as the exploit is publicly available and poses a significant risk to network security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-94100
Severity
CRITICAL
CVSS
9.9
EPSS
0.80%

Original NVD Description

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfiguration. Executing a manipulation of the argument vlan_wanX.ports can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.