CVE-2026-102241

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Restore. This manipulation of the argument aes_pass causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-320
• CWE-321

• https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/netcore_NAP930%20V0.1.241010.141410%20Router/NAP930_backup_hardcoded_aes_key.md
• https://vuldb.com/cve/CVE-2026-102241
• https://vuldb.com/submit/931269
• https://vuldb.com/vuln/411140
• https://vuldb.com/vuln/411140/cti

Published

Sep 29, 2026

Last Modified

Oct 1, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102234Reliance on untrusted inputs in a security decision in Visua…7.5
• CVE-2026-102235Improper encoding or escaping of output in Visual Studio Cod…8.8
• CVE-2026-102236Improper restriction of rendered ui layers or frames in Visu…8.6
• CVE-2026-102238Improper limitation of a pathname to a restricted directory …9.6
• CVE-2026-10224A security vulnerability has been detected in NousResearch h…5.5
• CVE-2026-102240A vulnerability was found in Netcore NAP930 0.1.241010.14141…10
• CVE-2026-102242Improper link resolution (CWE-59 / CWE-22) in the allowedLoc…8.6
• CVE-2026-102243A vulnerability was identified in MODSetter SurfSense up to …7.4
• CVE-2026-102244A security flaw has been discovered in MODSetter SurfSense u…4.3
• CVE-2026-102245A weakness has been identified in MODSetter SurfSense up to …7.3
• CVE-2026-102247A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6…6.8
• CVE-2026-102248A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-…7.3