Is CVE-2026-108929 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108929?

CVE-2026-108929 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-108929

Description

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.