CVE-2026-111710

HIGH 7.5

Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a single character, to protected routes like /router/get_user_type.cgi to kill the main Boa process and deny management interface access.

CWE	CWE-476
Vendor	netcore
Product	nr256cn
Published	Oct 16, 2026

Stay Ahead of the Next One

Get instant alerts for netcore nr256cn

Be the first to know when new high vulnerabilities affecting netcore nr256cn are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Netcore / NR256CN

0 ≤ 1.5.140116

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-basic-auth-null-deref.md vulncheck.com: https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-boa-web-server-null-pointer-dereference-dos

Credits

Zhou Ao Yin Luxing Lu Fangzhou Liu Xin