CVE-2026-102241 PUBLISHED

Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

Assigner: VulDB
Reserved: 28.09.2026 Published: 29.09.2026 Updated: 29.09.2026

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backup_common.sh of the component Backup/Restore. This manipulation of the argument aes_pass causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.1

Product Status

Vendor Netcore
Product NAP930
Versions
  • Version 0.1.241010.141410 is affected

Credits

  • yyycl (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Use of Hard-coded Cryptographic Key CWE
  • Key Management Error CWE