CVE-2026-108929
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Oct 12, 2026
Vendor
unknown
Description
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.