Netcore B11 EUVD-2026-95859

Exploitation requires network reachability to the affected Netcore B11 router's exposed interface; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication, no user interaction, and no special non-default configuration is indicated, so default-configuration devices with a network-reachable management/web service are at risk. The description does not name the exact vulnerable feature, protocol, or endpoint, so the precise triggering surface is not specified in available data. The principal LIMITING factor is deployment exposure: only the Netcore B11 Enterprise 9-port Gigabit wireless router at version v1.3.241114.024540 and earlier is affected, and the router's management interface must be reachable from the attacker's network position (e.g., exposed WAN-side or same-LAN access).

The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5) describes a remotely reachable, unauthenticated, low-complexity information-disclosure flaw with high confidentiality impact and no integrity or availability impact - internally consistent with CWE-200 and the description's 'remote attacker to obtain sensitive information.' However, several key prioritization signals are MISSING: no EPSS exploitation-probability score was provided, the CVE is NOT listed in CISA KEV (no active exploitation confirmed), and no SSVC decision data (automatable/technical-impact) was supplied. A third-party vulnerability-disclosure writeup exists (PRISMI-Team/VulnDisclos on GitHub) which documents the issue, but it is not labeled as weaponized exploit code and should not be treated as confirmed POC/exploit availability. Netting these signals: the raw CVSS is HIGH, but the real-world priority is tempered by the product's apparent niche/low deployment footprint and the absence of any exploitation-probability or KEV corroboration - this looks like a genuine but likely low-to-moderate real-world priority rather than a widespread emergency. Note also the CPE is malformed ('cpe:2.3:a:n/a:n/a:*...') and the EUVD affected version is 'n/a n/a', so affected-version scoping cannot be independently confirmed from the supplied data and should be verified against the vendor writeup.

A remote, unauthenticated attacker with network reachability to the router's management or web interface sends crafted requests to an exposed endpoint and retrieves sensitive information (e.g., configuration or credential-related data) without any user interaction, consistent with AV:N/AC:L/PR:N/UI:N. A public vulnerability-disclosure writeup describing the issue exists, but no weaponized exploit code is confirmed in the provided data.