PT-2026-93205

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description Sensitive information disclosure occurs through VPN read handlers. Attackers can exploit the endpoints 'mod vpn remote/plan.json', 'pptpd user show.cgi', 'pptp client config show.cgi', and 'l2tpd...

PT-2026-93199

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter conn del cgi.c and gre prio set cgi.c due to unchecked atoi results. An attacker can trigger the flaw by supplying crafted input to these handlers, causing a denial of servic...

PT-2026-93202

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route policy add.cgi caused by a missing exit port parameter. Attackers can send requests lacking the exit port field to trigger the null pointer dereference, resulting in a denial of service...

PT-2026-93206

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcp add staticip cgi, dhcp staticip show cgi, ip acl set cgi, and ip acl show cgi. Attackers can inject persistent malicious scripts through these...

PT-2026-93207

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by network...

PT-2026-93204

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd write pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via put file cgi.c to trigger out-of-bounds reads across main.c, check image uuid.c, a...

PT-2026-93192

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns wan list show.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewe...

PT-2026-93191

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns wan list show.cgi endpoint and related DDNSset cgi, IGD GetCgiHandler, and IGD CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

PT-2026-93196

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools start set cgi, ntools tcpdump start set cgi, exe default, and ntools proc components. Attackers can inject crafted arguments into these tcpdump launch...

PT-2026-93193

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user pass show.cgi component. Low-privilege attackers can exploit this flaw via ui config 2.xml and misc.js to disclose router credentials...

PT-2026-93194

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

PT-2026-93188

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7 web auth user show.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated...

PT-2026-93190

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan config set cgi, wan num set cgi, and lan ip change cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network...

PT-2026-93197

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod qos bandwidth plan.json handling within filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond...

CVE-2026-76872: Improper Neutralization of Input During Web Page Generation

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcpaddstaticipcgi, dhcpstaticipshowcgi, ipaclsetcgi, and ipaclshowcgi. Attackers can inject persistent malicious scripts through these components to...

PT-2026-93200

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description OS command argument injection occurs because the system builds root-run command lines using unquoted user-supplied DDNS input within the DDNSset cgi.c and ddns Proc.c components. Attackers can use...

CVE-2026-76868: NULL Pointer Dereference

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in routepolicyadd.cgi caused by a missing exitport parameter. Attackers can send requests lacking the exitport field to trigger the null pointer dereference, resulting in a denial of service...

PT-2026-93189

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7 web auth log dump cgi.c, audit get cgi.c, and mod dispatch auth/plan.json. Attackers can query these audit components to obtain other users' session and browsing histo...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them as SCSI devices in a guest VM. I/O to the vFC device is handled by the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Do not dereference the ACPI root object handle Since the commit referenced in the Fixes section below the VMBus client driver attempts to traverse the ACPI namespace from the VMBus ACPI device to the ACPI...