Skip to content

CVE-2026-108906

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 13, 2026
Last Seen
October 13, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A vulnerability, CVE-2026-108906, has been identified in the Netcore NR268 router version 1.7.121109, affecting the filter_arp_put_file_cgi function. This flaw allows for an out-of-bounds read, which can be exploited remotely by an authenticated attacker. The vulnerability was publicly disclosed on...

Public Exploits

Checking GitHub for proof-of-concept code…