CVE-2026-108932

Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109

Description Cross site scripting occurs in the DHCP Hostname Handler component due to the improper handling of the Hostname argument within the eval() function of the 'filter hosts dump.cgi' endpoint. This allows for remote exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the 'filter hosts dump.cgi' endpoint to minimize the risk of exploitation.