EUVD-2026-80040

Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in routepolicyadd.cgi caused by a missing exitport parameter. Attackers can send requests lacking the exitport field to trigger the null pointer dereference, resulting in a denial of service...

CVE-2026-76868

Netcore NR255-V version 1.5.130703 is affected by a null pointer dereference in route_policy_add.cgi , triggered when a request omits the exit_port parameter. An authenticated attacker (high privileges required) can send a crafted request to cause a denial of service . The vulnerability is rated ...