Description
An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information
Published: 2026-10-09
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Sensitive information disclosure
Action: Assess Impact
AI Analysis

Impact

An exposed vulnerability in the Netcore B11 Enterprise‑level full Gigabit 9‑port wireless router firmware allows a remote attacker to obtain sensitive information. Based on the description, it is inferred that the issue stems from insufficient protection of configuration data or authentication mechanisms, enabling an unauthorized entity to read confidential details that should be inaccessible. The impact includes potential leakage of network configuration, user credentials, or other privileged data, which could be leveraged for further network compromise.

Affected Systems

The flaw affects Netcore B11 routers running firmware version v1.3.241114.024540 and earlier. Users of these devices are at risk if they have not applied later firmware releases or other mitigations.

Risk and Exploitability

The vulnerability is reachable over the network, implying a remote attack vector with high convenience. The CVSS score of 7.5 indicates a medium-to-high risk, whereas the EPSS score is not available and it is not listed in CISA KEV. Based on the description, it is inferred that attackers could exploit the weakness by sending crafted requests to the router’s management interface or leveraging default credentials, gaining access to confidential information.

Generated by OpenCVE AI on October 9, 2026 at 21:23 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the router firmware to the latest available version that addresses the information disclosure flaw.
  • If an upgrade is not immediately possible, limit access to the router’s management interface by configuring a firewall rule or placing the device on a separate, isolated network segment.
  • Change all default credentials and enforce strong authentication policies on the router, then verify that the configuration does not expose sensitive data over the network.

Generated by OpenCVE AI on October 9, 2026 at 21:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 11 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Netcore
Netcore b11 Routers
Vendors & Products Netcore
Netcore b11 Routers

Fri, 09 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Title Sensitive Information Disclosure in Netcore B11 Router Firmware

Fri, 09 Oct 2026 20:15:00 +0000

Type Values Removed Values Added
Title Sensitive Information Disclosure in Netcore B11 Router Firmware v1.3.241114.024540
Weaknesses CWE-522

Fri, 09 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 09 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}


Fri, 09 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Title Sensitive Information Disclosure in Netcore B11 Router Firmware v1.3.241114.024540
Weaknesses CWE-200
CWE-522

Fri, 09 Oct 2026 14:45:00 +0000

Type Values Removed Values Added
Description An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information
References

Subscriptions

Netcore B11 Routers
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-09T18:07:10.981Z

Reserved: 2026-08-25T00:00:00.000Z

Link: CVE-2026-78795

cve-icon Vulnrichment

Updated: 2026-10-09T18:06:53.987Z

cve-icon NVD

Status : Deferred

Published: 2026-10-09T15:17:15.810

Modified: 2026-10-09T18:17:14.903

Link: CVE-2026-78795

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-11T12:27:49Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor