CVE-2026-101000

A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-862
• CWE-863

• https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NBR100V2_V1.3.240614.030928%20Router/netcore_nbr100v2_uci_config_tamper.md
• https://vuldb.com/cve/CVE-2026-101000
• https://vuldb.com/submit/919999
• https://vuldb.com/vuln/410870
• https://vuldb.com/vuln/410870/cti

Published

Sep 28, 2026

Last Modified

Sep 28, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10096The Qi Blocks plugin for WordPress is vulnerable to Insecure…4.3
• CVE-2026-10097wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_av…7.5
• CVE-2026-10098OCSP CertID serial-number length-confusion in wolfSSL_OCSP_r…5.3
• CVE-2026-10099XX-Net V5.16.6 contains a WebSocket frame parsing vulnerabil…5.1
• CVE-2026-1010A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2026-10100The Simple Custom Login Page plugin for WordPress is vulnera…4.4
• CVE-2026-101001A vulnerability was identified in Netcore NBR200V2 1.3.24112…10
• CVE-2026-101002A security flaw has been discovered in Netcore NBR200V2 1.3.…9.9
• CVE-2026-101003A weakness has been identified in Cesanta Mongoose up to 7.2…5.3
• CVE-2026-101004A security vulnerability has been detected in notionnext-org…5.3
• CVE-2026-101005A vulnerability was detected in October CMS up to 4.3.4. Thi…7.3
• CVE-2026-101006A flaw has been found in Frappe HR up to 16.15.0. This vulne…4.3