Skip to finding

from bug to shell.

Firmware

A factory-default Netcore NBR100V2 accepts anonymous Ubus writes that persist Wi-Fi and update settings.

Keep untrusted peers off the setup network after deployment and after resets; no patch is available.

Sources

Code / PoCHACKALL/netcore_NBR100V2_V1.3.240614.030928 Router/netcore_nbr100v2_uci_config_tamper.md at main · senxitoyshuyi-ui/HACKALL Secondarycve-2026-101000

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Tuesday, September 29, 2026