NR256CN vulnerabilities

2 known vulnerabilities in NR256CN from Netcore. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  NR256CN: Stack-based Buffer Overflow

  CVE-2026-111711Oct 16, 2026Netcore

  Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers. Unauthenticated attackers can

• 7.5 High severity

  NR256CN: NULL Pointer Dereference

  CVE-2026-111710Oct 16, 2026Netcore

  Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authori