CVE-2026-111711

{
  "etk_id": "ETK-2026-1803",
  "cve_id": "CVE-2026-111711",
  "display_id": "CVE-2026-111711",
  "ghsa_id": "GHSA-5769-g37j-m8jq",
  "euvd_id": "EUVD-2026-103003",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Pre-authentication stack overflow in Netcore NR256CN",
  "summary": "Netcore NR256CN firmware through 1.5.140116 is affected by a stack buffer overflow in the Boa web server's authentication handling. An unauthenticated remote party may cause the Boa service to stop and may be able to run code if they can reach protected router CGI endpoints.",
  "mitigation": "Remove device management and protected router CGI endpoints from untrusted networks; restrict access to trusted administrative hosts or a VPN. Apply a vendor firmware update when one is provided, as no fixed version is recorded.",
  "vendor": "Netcore",
  "product": "NR256CN",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.5.140116"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "NR256CN",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0049,
  "epss_percentile": 0.4103,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 19.970719366666668,
  "t0_at": "2026-10-16T17:40:01.282000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-18T20:55:00.546321+00:00",
      "days": 2.135408151863426,
      "is_lower_bound": false,
      "measured_at": "2026-10-16T17:40:01.282000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-16T17:40:01.282000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-16T17:40:01.282000+00:00",
      "url": "https://github.com/advisories/GHSA-5769-g37j-m8jq"
    }
  }
}