Which versions of Netcore NBR200V2 are affected by EUVD-2026-83811?

Netcore NBR200V2 routers running firmware 1.3.241127.071246 contain a command injection flaw in the web-based Backup Restore function that lets an authenticated user with network access to the…

Is there a public PoC exploit available for EUVD-2026-83811?

Yes, a public proof-of-concept exploit is available for EUVD-2026-83811. Prioritise patching immediately. EPSS: 1.7%.

How to fix or mitigate EUVD-2026-83811?

Within 24 hours, inventory all Netcore NBR200V2 devices and identify which are running firmware 1.3.241127.071246; immediately remove or restrict internet-facing exposure of the web management interface by disabling remote administration and allowing administrative access only from trusted internal management networks or VPN, and change all default and shared administrative credentials to unique strong passwords. Confirm whether the QUERY_STRING parameter of restore.cgi is reachable from untrusted networks and block it at the perimeter if remote administration cannot be disabled. Within 7 days, apply network segmentation so router management interfaces are isolated from general user and guest traffic, enforce logging and monitoring on the devices (including alerting on unusual outbound connections and unexpected process or configuration changes), and validate whether any configuration backups were submitted through the Backup Restore function by unauthorized accounts. If the vendor remains unresponsive, evaluate replacement with a supported router model or an alternative edge device as a compensating measure. Within 30 days, escalate to Netcore through all available channels to obtain a patched firmware release and a vendor advisory, establish a formal risk-acceptance or remediation plan for units that cannot be isolated, and re-scan the fleet to confirm no unauthorized firmware or account changes occurred. If a vendor patch is released, apply it to all NBR200V2 devices as soon as it is validated against a test unit.

Netcore NBR200V2 EUVD-2026-83811

Q: What is the CVSS score of EUVD-2026-83811?

EUVD-2026-83811 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.7%.

| CVE-2026-94099 HIGH

Command Injection (CWE-77)

2026-09-21 VulDB

GHSA-25m6-m9q2-9cpx

Command Injection Netcore Nbr200V2

8.6

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.6 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable command injection with low privileges (PR:L per web-panel access) yielding root-level code execution on the device; no scope change to a separate system.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Sep 21, 2026 - 11:22 vuln.today

Metadata Corrected

Sep 21, 2026 - 01:40 vuln.today

tag: Netcore added

Analysis Updated

Sep 21, 2026 - 01:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Sep 21, 2026 - 01:22 vuln.today

cvss_changed

Severity Changed

Sep 21, 2026 - 01:22 NVD

CRITICAL HIGH

CVSS changed

Sep 21, 2026 - 01:22 NVD

9.4 (CRITICAL) 8.6 (HIGH)

Analysis Generated

Sep 21, 2026 - 00:57 vuln.today

CVE Published

Sep 21, 2026 - 00:15 cve.org

CRITICAL 9.4

DescriptionCVE.org

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Restore. Performing a manipulation of the argument QUERY_STRING results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Command injection in the Netcore NBR200V2 router (firmware 1.3.241127.071246) allows an authenticated attacker who can reach the web management interface to run arbitrary shell commands on the device by manipulating the QUERY_STRING argument processed by restore.cgi in the Backup Restore component. The flaw is network-reachable, requires only low privileges (CVSS PR:L) with no user interaction, and produces high confidentiality, integrity and availability impact - on embedded routers this typically equates to root-level control of the device's OS. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation targets the Backup Restore feature via the restore.cgi endpoint on the NBR200V2 router's management interface, injecting commands through the QUERY_STRING argument. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N with full VC/VI/VA:H) describes a network-reachable command injection needing only low privileges - a serious combination for an embedded router, since command injection typically yields root-equivalent code execution on these devices. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch was identified at time of analysis: Netcore was contacted before publication and did not respond, and no fixed firmware version exists for the NBR200V2, so remediation must rely on compensating controls. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all Netcore NBR200V2 devices and identify which are running firmware 1.3.241127.071246; immediately remove or restrict internet-facing exposure of the web management interface by disabling remote administration and allowing administrative access only from trusted internal management networks or VPN, and change all default and shared administrative credentials to unique strong passwords. …

Threat intelligence, references, and detailed analysis are available after sign-in.