CVE-2026-101074

Name of the Vulnerable Software and Affected Versions Netcore NR289-GE version 1.4.5102

Description A stack-based buffer overflow exists in the Authentication component within the password-check() function of the /bin/boa file. This issue allows a remote attacker to trigger the overflow by manipulating the Username argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the Authentication component to minimize the risk of exploitation.