CVE-2026-101000

Name of the Vulnerable Software and Affected Versions Netcore NBR100V2 version 1.3.240614.030928

Description An authorization bypass exists in the ACL Handler component within the file /usr/share/rpcd/acl.d/unauthenticated.json. A remote attacker can manipulate the section argument of the uci.apply() function to perform unauthorized actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the uci.apply() function within the ACL Handler component.