CVE-2026-101075: OS Command Injection in Netcore NR289-GE
A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AI Analysis
Technical Summary
Netcore NR289-GE version 1.4.5102 contains an OS command injection vulnerability in the system function of the /location_time.cgi file's Location Time Handler component. The vulnerability arises from improper handling of the 'mac' argument, allowing remote attackers to inject and execute arbitrary operating system commands. The exploit has been publicly disclosed, but no vendor fix or advisory has been issued.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected device without authentication, potentially leading to full system compromise. Given the critical CVSS score of 10.0 and the nature of the vulnerability, the impact is severe, affecting confidentiality, integrity, and availability of the device.
Mitigation Recommendations
No official patch or vendor advisory is available. Users should consider isolating affected devices from untrusted networks and monitor for suspicious activity. Due to the lack of vendor response, mitigation options are limited until a fix is released. Applying network-level protections such as firewall rules to restrict access to the vulnerable endpoint may reduce exposure.
CVE-2026-101075: OS Command Injection in Netcore NR289-GE
Description
A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS v4.0
Score 10.0critical
Affected software
Netcore
NR289-GE
cpe:2.3:a:netcore:nr289-ge:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Netcore NR289-GE version 1.4.5102 contains an OS command injection vulnerability in the system function of the /location_time.cgi file's Location Time Handler component. The vulnerability arises from improper handling of the 'mac' argument, allowing remote attackers to inject and execute arbitrary operating system commands. The exploit has been publicly disclosed, but no vendor fix or advisory has been issued.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected device without authentication, potentially leading to full system compromise. Given the critical CVSS score of 10.0 and the nature of the vulnerability, the impact is severe, affecting confidentiality, integrity, and availability of the device.
Mitigation Recommendations
No official patch or vendor advisory is available. Users should consider isolating affected devices from untrusted networks and monitor for suspicious activity. Due to the lack of vendor response, mitigation options are limited until a fix is released. Applying network-level protections such as firewall rules to restrict access to the vulnerable endpoint may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-27T17:48:04.788Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aba81c1f7a7c54106d44fdc
Added to database: 09/28/2026, 15:03:29 UTC
Last enriched: 09/28/2026, 15:17:47 UTC
Last updated: 09/29/2026, 02:44:40 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.