Is CVE-2026-111712 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111712?

CVE-2026-111712 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-111712

Description

Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico route to invoke protected management handlers without credentials.