{"id":"CVE-2026-78795","published":"2026-10-09T15:17:15.810","lastModified":"2026-10-09T18:17:14.903","description":"An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-200"],"vendors":[],"products":[],"references":[{"url":"http://b11.com","tags":[]},{"url":"http://netcore.com","tags":[]},{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Netcore/sensitive-information-disclosure.md","tags":[]},{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Netcore/sensitive-information-disclosure.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Netcore/sensitive-information-disclosure.md","tags":[]},{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Netcore/sensitive-information-disclosure.md","tags":[]}],"hasPoc":true,"ai":{"summary":"The Netcore B11 router has a vulnerability that allows remote attackers to access sensitive information without authentication. This flaw exposes potentially confidential data through unsecured API endpoints or configuration files.","exploitability":"Exploitation is straightforward with no prerequisites, requiring only network access to the affected router's API endpoints.","blast_radius":"If exploited, this vulnerability could expose sensitive network configuration details, user credentials, or other confidential information across all devices connected to the router.","remediation":"Upgrade to firmware version 2.590 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["information-disclosure","router","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:01:38.059Z"}}