CVE-2026-94095Proof of concept (PoC) published · CISA
Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection
CVSS score
9.4
EPSS probability
%2.4
Risk score
0.2
Published
25 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Netcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2026-94097
Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection
N
Patch status unknownEPSS %3
10.0
CVE-2026-101001
Netcore NBR200V2 Web Management network_tools eval os command injection
N
Patch status unknownEPSS %3
10.0
CVE-2026-101075
Netcore NR289-GE Location Time location_time.cgi system os command injection
N
Patch status unknownEPSS %2
9.4
CVE-2026-94098
Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection
N
Patch status unknownEPSS %2
10.0
CVE-2026-102240
Netcore NAP930 Network Tools CGI network_tools eval os command injection
N
Patch status unknownEPSS %2
10.0
CVE-2026-101076
Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
N
Patch status unknownEPSS %2
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-94095"