Description
An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file
Published: 2026-10-09
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

An issue in Netcore B11 Enterprise‑level full Gigabit 9‑port shop wireless router, firmware version v1.3.241114.024540 and earlier, allows a remote attacker to execute arbitrary code through the www\\cgi-bin\\upgrade file in the router's web interface. The flaw permits complete compromise of the device’s operating system, potentially affecting any devices on the managed network.

Affected Systems

The affected product is the Netcore B11 Enterprise‑level full Gigabit 9‑port shop wireless router, firmware version v1.3.241114.024540 and earlier. The vulnerability exists in the router’s web interface and can be triggered via the www\\cgi-bin\\upgrade endpoint, allowing remote execution of system commands.

Risk and Exploitability

The CVSS score of 9.8 classifies this vulnerability as high risk. The EPSS score is below 1%, indicating a low but non‑zero probability of exploitation. It is not listed in the CISA KEV catalog. The attack vector is a remote HTTP request to the www\\cgi-bin\\upgrade endpoint, enabling arbitrary command execution on the router.

Generated by OpenCVE AI on October 20, 2026 at 12:37 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest router firmware that addresses the command‑injection flaw (CWE‑78).
  • Configure the upgrade endpoint to enforce strict input validation and reject arbitrary commands (CWE‑78).
  • Restrict external traffic to the router’s HTTP management interface using firewall or ACL rules, specifically limiting access to the /cgi-bin/upgrade endpoint.
  • Monitor the management interface for anomalous upgrade requests and investigate any detected activity.

Generated by OpenCVE AI on October 20, 2026 at 12:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 23:15:00 +0000

Type Values Removed Values Added
Title Remote code execution via upgrade endpoint in Netcore B11 routers
Weaknesses CWE-77

Mon, 19 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 19 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-78
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Sun, 11 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Netcore
Netcore b11 Routers
Vendors & Products Netcore
Netcore b11 Routers

Fri, 09 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Title Remote code execution via upgrade endpoint in Netcore B11 routers
Weaknesses CWE-77

Fri, 09 Oct 2026 15:15:00 +0000

Type Values Removed Values Added
Description An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file
References

Subscriptions

Netcore B11 Routers
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-19T18:51:48.132Z

Reserved: 2026-08-25T00:00:00.000Z

Link: CVE-2026-78796

cve-icon Vulnrichment

Updated: 2026-10-19T17:49:15.373Z

cve-icon NVD

Status : Deferred

Published: 2026-10-09T15:17:15.947

Modified: 2026-10-19T19:18:08.737

Link: CVE-2026-78796

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T12:45:15Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')