CVE-2026-102241

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Restore. This manipulation of the argument aes_pass causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-320
• CWE-321

• https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NAP930%20V0.1.241010.141410%20Router/NAP930_backup_hardcoded_aes_key.md
• https://vuldb.com/cve/CVE-2026-102241
• https://vuldb.com/submit/931269
• https://vuldb.com/vuln/411140
• https://vuldb.com/vuln/411140/cti

Published

Sep 29, 2026

Last Modified

Sep 29, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10220A vulnerability was determined in NousResearch hermes-agent …7.3
• CVE-2026-10221A vulnerability was identified in NousResearch hermes-agent …7.3
• CVE-2026-10222A security flaw has been discovered in NousResearch hermes-a…5.6
• CVE-2026-10223A weakness has been identified in NousResearch hermes-agent …6.3
• CVE-2026-10224A security vulnerability has been detected in NousResearch h…5.5
• CVE-2026-102240A vulnerability was found in Netcore NAP930 0.1.241010.14141…10
• CVE-2026-102243A vulnerability was identified in MODSetter SurfSense up to …7.4
• CVE-2026-102244A security flaw has been discovered in MODSetter SurfSense u…4.3
• CVE-2026-10225A vulnerability was detected in raisulislamg4 student_manage…7.3
• CVE-2026-10226A flaw has been found in raisulislamg4 student_management_sy…7.3
• CVE-2026-102265PyJWT is a Python implementation of JSON Web Token standards…5.3
• CVE-2026-102266PyJWT is a Python implementation of JSON Web Token standards…7.4