MEDIUM
Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
Published Sep 15, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.47%
Description
Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi.c due to unchecked atoi() results. An attacker can trigger the flaw by supplying crafted input to these handlers, causing a denial of service.
Affected products
-
Affected
- 1.5.130703
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80037 Advisory
- https://github.com/draw-ctf/netcore-router-public-refs/blob/main/2026.08.19-netcore-nr255v-null-deref-atoi.md third-party-advisory
- https://www.vulncheck.com/advisories/netcore-nr255-v-1.5.130703-null-pointer-dereference-via-unchecked-atoi-in-qos-setter-handlers third-party-advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Sep 15, 2026
Updated Sep 16, 2026
Reserved Aug 19, 2026
Link CVE-2026-76865
CISA Vulnrichment
Updated Sep 16, 2026
Red Hat
No data
GitHub
No data