Netcore - Nap930 - CRITICAL - CVE-2026-102240. An OS command injection vulnerability was identified in the Netcore NAP930 router's Network Tools CGI component. This flaw occurs within the eval function of the /www/cgi-bin/network_tools file, where manipulation of the input parameter 'sid' enables attackers to execute arbitrary operating system commands remotely. The exploit has been publicly disclosed, raising significant security concerns for users of affected versions. Despite early communication with the vendor, no response was received regarding this critical issue. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io