CVE-2026-111710
7.5HighPublished 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-476
Impact
Unauthenticated remote attackers can crash the router's web server and take down the web management interface. They only need network access to send a single malformed HTTP request to protected endpoints.
Root cause
The Boa web server's user_auth() function triggers a NULL pointer dereference when parsing a Basic Authorization header missing a colon delimiter.
Affected systems
Netcore NR256CN through version 1.5.140116
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
No fixed firmware version is listed; restrict network access to the router's web management interface to trusted IPs or management VLANs to block untrusted HTTP traffic.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a single character, to protected routes like /router/get_user_type.cgi to kill the main Boa process and deny management interface access.