CVE-2026-108906

A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter arp put file cgi of the file /router/filter arp put file.cgi. The manipulation of the argument put file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.