What’s Vulnerable › Products

Netcore NR255-V vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.

Check whether your Netcore NR255-V version is affected

Latest Netcore NR255-V vulnerabilities

• CVE-2026-92257 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks (CVSS 5.4)
• CVE-2026-92256 — Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers (CVSS 6.5)
• CVE-2026-92255 — Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse (CVSS 5.4)
• CVE-2026-76873 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields (CVSS 5.2)
• CVE-2026-76872 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages (CVSS 5.4)
• CVE-2026-76871 — Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers (CVSS 6.5)
• CVE-2026-76870 — Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation (CVSS 7.1)
• CVE-2026-76869 — Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi (CVSS 7.2)
• CVE-2026-76868 — Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port (CVSS 4.9)
• CVE-2026-76867 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers (CVSS 5.4)
• CVE-2026-76866 — Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters (CVSS 7.2)
• CVE-2026-76865 — Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers (CVSS 4.9)
• CVE-2026-76864 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names (CVSS 4.8)
• CVE-2026-76863 — Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes (CVSS 4.3)
• CVE-2026-76862 — Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths (CVSS 8.8)
• CVE-2026-76861 — Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi (CVSS 8.8)
• CVE-2026-76860 — Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization (CVSS 8.8)
• CVE-2026-76859 — Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi (CVSS 6.5)
• CVE-2026-76858 — Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi (CVSS 4.8)
• CVE-2026-76857 — Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi (CVSS 6.5)
• CVE-2026-76856 — Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints (CVSS 8.1)
• CVE-2026-76855 — Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints (CVSS 6.5)
• CVE-2026-76854 — Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi (CVSS 6.5)