CVE-2026-76852 — Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.c…
Published: 2026-09-15 · CVSS: 8.7 · CVSS 4.0
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.cgi and check_image_uuid.c to bypass firmware signature validation and load unauthorized firmware images.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7