Approved changes feed: RSS · Atom
cpe:2.3:a:netcore:nr255-v:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netcore (ebda05da-f232-5bcd-abc7-24a3271d338c) |
|---|---|
| Product | Nr255 V (d36f234c-ad6c-5aed-9cfe-b7eb015327a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-92255 |
vulnerable | 2026-09-16 04:33:07.980660 |
Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse
MEDIUM (5.4)
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Attackers can trigger an unterminated buffer over-read by exploiting this flaw in the affected component, potentially exposing adjacent memory contents.
Published: 2026-09-15T21:58:03.906Z
Updated: 2026-09-21T20:53:03.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92256 |
vulnerable | 2026-09-16 04:33:07.927747 |
Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
MEDIUM (6.5)
NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config_show_cgi.c, ipsec_show_cgi.c, and mod_vpn_remote/plan.json read handlers. Attackers can query l2tpd_config_show.cgi to expose stored IPsec PSK and RSA key material.
Published: 2026-09-15T21:58:04.659Z
Updated: 2026-09-16T19:33:51.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-92257 |
vulnerable | 2026-09-16 04:33:07.914431 |
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
MEDIUM (5.4)
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious code executed in the context of other users viewing the affected content.
Published: 2026-09-15T21:58:05.366Z
Updated: 2026-09-21T17:55:57.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76867 |
vulnerable | 2026-09-16 04:32:47.864649 |
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers
MEDIUM (5.4)
Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including routing_tab_add_cgi, routing_table_list_show_cgi, route_policy_add_cgi, and route_policy_parame_show_cgi. Attackers can inject persistent script payloads through these route and NAT configuration pages, which are then executed in the context of users viewing the affected pages.
Published: 2026-09-15T21:57:59.049Z
Updated: 2026-09-17T16:54:50.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76856 |
vulnerable | 2026-09-16 04:32:47.858995 |
Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
HIGH (8.1)
Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_change_cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration settings without consent.
Published: 2026-09-15T21:57:51.479Z
Updated: 2026-09-21T18:19:53.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76863 |
vulnerable | 2026-09-16 04:32:47.851698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76873 |
vulnerable | 2026-09-16 04:32:47.838340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76872 |
vulnerable | 2026-09-16 04:32:47.827780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76866 |
vulnerable | 2026-09-16 04:32:47.822320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76857 |
vulnerable | 2026-09-16 04:32:47.821544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76862 |
vulnerable | 2026-09-16 04:32:47.816185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76859 |
vulnerable | 2026-09-16 04:32:47.808550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76868 |
vulnerable | 2026-09-16 04:32:47.807108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76870 |
vulnerable | 2026-09-16 04:32:47.804574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76864 |
vulnerable | 2026-09-16 04:32:47.799992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76855 |
vulnerable | 2026-09-16 04:32:47.796581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76860 |
vulnerable | 2026-09-16 04:32:47.791146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76865 |
vulnerable | 2026-09-16 04:32:47.787960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76854 |
vulnerable | 2026-09-16 04:32:47.783471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76861 |
vulnerable | 2026-09-16 04:32:47.774334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76858 |
vulnerable | 2026-09-16 04:32:47.759277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76869 |
vulnerable | 2026-09-16 04:32:47.758498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76871 |
vulnerable | 2026-09-16 04:32:47.754221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.