Logo
Retour à la veille

CVE-2026-108932

Publié : 12 octobre 2026
Modifié : 12 octobre 2026
Lien officiel NVD
Score CVSS
4.3
MEDIUM

Description détaillée

A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname Handler. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Références et Patchs

https://github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-dhcp-hostname-stored-xss.mdhttps://vuldb.com/cve/CVE-2026-108932https://vuldb.com/submit/977186https://vuldb.com/vuln/416756https://vuldb.com/vuln/416756/cti

Dernières Vulnérabilités

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

VOIR DÉTAILS

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

VOIR DÉTAILS

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

VOIR DÉTAILS