{"uuid": "e26177db-ff8d-4bec-81ef-5ba70d4719ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "seen", "source": "https://gist.github.com/ichintu/4d27b2fa4a71489307152f1f3aa025ef", "content": "This digest covers two cybersecurity updates:\n\n\u2022 **PcapSplitter Silent Packet Loss:** A bug in the PcapPlusPlus `PcapSplitter` tool caused silent data corruption and packet loss due to mishandled TCP session reuse. When filenames collided, files were opened in write mode instead of append mode, truncating output. The issue was reproduced, patched, and successfully merged.\n\n\u2022 **Netcore NBR200V2 Command Injection (CVE-2026-94095):** A critical (9.9) remote command injection vulnerability exists in the router's traceroute diagnostic feature. Exploitable via the `url` parameter, the flaw is publicly known and actively exploited, with no vendor patch or acknowledgment issued.", "creation_timestamp": "2026-09-21T04:18:48.832479Z"}