PT-2026-93204

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd write pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via put file cgi.c to trigger out-of-bounds reads across main.c, check image uuid.c, a...

PT-2026-93192

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns wan list show.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewe...

PT-2026-93191

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns wan list show.cgi endpoint and related DDNSset cgi, IGD GetCgiHandler, and IGD CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

PT-2026-93196

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools start set cgi, ntools tcpdump start set cgi, exe default, and ntools proc components. Attackers can inject crafted arguments into these tcpdump launch...

PT-2026-93193

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user pass show.cgi component. Low-privilege attackers can exploit this flaw via ui config 2.xml and misc.js to disclose router credentials...

PT-2026-93194

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

PT-2026-93188

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7 web auth user show.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated...

PT-2026-93190

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan config set cgi, wan num set cgi, and lan ip change cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network...

PT-2026-93197

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod qos bandwidth plan.json handling within filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond...

CVE-2026-76872: Improper Neutralization of Input During Web Page Generation

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcpaddstaticipcgi, dhcpstaticipshowcgi, ipaclsetcgi, and ipaclshowcgi. Attackers can inject persistent malicious scripts through these components to...

CVE-2026-76865: NULL Pointer Dereference

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filterconndelcgi.c and grepriosetcgi.c due to unchecked atoi results. An attacker can trigger the flaw by supplying crafted input to these handlers, causing a denial of service...

PT-2026-93200

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description OS command argument injection occurs because the system builds root-run command lines using unquoted user-supplied DDNS input within the DDNSset cgi.c and ddns Proc.c components. Attackers can use...

PT-2026-93202

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route policy add.cgi caused by a missing exit port parameter. Attackers can send requests lacking the exit port field to trigger the null pointer dereference, resulting in a denial of service...

CVE-2026-76864: Improper Neutralization of Input During Web Page Generation

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

CVE-2026-76868: NULL Pointer Dereference

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in routepolicyadd.cgi caused by a missing exitport parameter. Attackers can send requests lacking the exitport field to trigger the null pointer dereference, resulting in a denial of service...

CVE-2026-76858: Improper Neutralization of Input During Web Page Generation

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddnswanlistshow.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed...

CVE-2026-76854: Insufficiently Protected Credentials

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...

CVE-2026-76871: Insufficiently Protected Credentials

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76866: Improper Neutralization of Argument Delimiters in a Command

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them as SCSI devices in a guest VM. I/O to the vFC device is handled by the...