Netcore NR255-V

• CVE-2026-92257 Medium 5.4 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks 0.2%
• CVE-2026-92256 Medium 6.5 Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers 0.4%
• CVE-2026-92255 Medium 5.4 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse 0.3%
• CVE-2026-76873 Medium 5.2 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields 0.2%
• CVE-2026-76872 Medium 5.4 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages 0.2%
• CVE-2026-76871 Medium 6.5 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers 0.4%
• CVE-2026-76870 High 7.1 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation 0.4%
• CVE-2026-76869 High 7.2 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi 0.6%
• CVE-2026-76868 Medium 4.9 Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port 0.5%
• CVE-2026-76867 Medium 5.4 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers 0.2%
• CVE-2026-76866 High 7.2 Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters 0.6%
• CVE-2026-76865 Medium 4.9 Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers 0.5%
• CVE-2026-76864 Medium 4.8 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names 0.3%
• CVE-2026-76863 Medium 4.3 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes 0.3%
• CVE-2026-76862 High 8.8 Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths 0.5%
• CVE-2026-76861 High 8.8 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi 0.7%
• CVE-2026-76860 High 8.8 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization 0.5%
• CVE-2026-76859 Medium 6.5 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi 0.4%
• CVE-2026-76858 Medium 4.8 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi 0.3%
• CVE-2026-76857 Medium 6.5 Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi 0.4%
• CVE-2026-76856 High 8.1 Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints 0.2%
• CVE-2026-76855 Medium 6.5 Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints 0.4%
• CVE-2026-76854 Medium 6.5 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi 0.4%