Netcore / NR255-V
23 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-92257 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks | MEDIUM | 5.1 | Sep 15, 2026 |
| CVE-2026-92256 | Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-92255 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse | MEDIUM | 5.3 | Sep 15, 2026 |
| CVE-2026-76873 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields | MEDIUM | 5.1 | Sep 15, 2026 |
| CVE-2026-76872 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages | MEDIUM | 5.1 | Sep 15, 2026 |
| CVE-2026-76871 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-76870 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-76869 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi | HIGH | 8.6 | Sep 15, 2026 |
| CVE-2026-76868 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port | MEDIUM | 6.9 | Sep 15, 2026 |
| CVE-2026-76867 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers | MEDIUM | 5.1 | Sep 15, 2026 |
| CVE-2026-76866 | Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters | HIGH | 8.6 | Sep 15, 2026 |
| CVE-2026-76865 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers | MEDIUM | 6.9 | Sep 15, 2026 |
| CVE-2026-76864 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names | MEDIUM | 4.8 | Sep 15, 2026 |
| CVE-2026-76863 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes | MEDIUM | 5.3 | Sep 15, 2026 |
| CVE-2026-76862 | Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths | HIGH | 8.7 | Sep 15, 2026 |
| CVE-2026-76861 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi | HIGH | 8.7 | Sep 15, 2026 |
| CVE-2026-76860 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization | HIGH | 8.7 | Sep 15, 2026 |
| CVE-2026-76859 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-76858 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi | MEDIUM | 4.8 | Sep 15, 2026 |
| CVE-2026-76857 | Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-76856 | Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints | HIGH | 7.0 | Sep 15, 2026 |
| CVE-2026-76855 | Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints | HIGH | 7.1 | Sep 15, 2026 |
| CVE-2026-76854 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi | HIGH | 7.1 | Sep 15, 2026 |
Showing 1 to 23 of 23 CVEs