CVE-2026-76868

Netcore NR255-V version 1.5.130703 is affected by a null pointer dereference in route_policy_add.cgi , triggered when a request omits the exit_port parameter. An authenticated attacker (high privileges required) can send a crafted request to cause a denial of service . The vulnerability is rated ...

CVE-2026-76866

Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...

CVE-2026-76865

Netcore NR255-V (version 1.5.130703) is affected by a null pointer dereference in its QoS setter CGI handlers, specifically filter_conn_del_cgi.c and gre_prio_set_cgi.c , caused by unchecked atoi() results. An attacker with high-level privileges can supply crafted input to these handlers to trigg...

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling, specifically within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry...

CVE-2026-76864

Netcore NR255-V version 1.5.130703 suffers from a stored cross-site scripting (XSS) vulnerability in its QoS management interface. QoS rule names are not sanitized before being parsed via eval() in the qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and qos_filter_show_cgi CGI handlers...

CVE-2026-76862

Netcore NR255-V (version 1.5.130703) is affected by an OS command argument injection vulnerability in the Nettools tcpdump launch paths , specifically the ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. An authenticated attacker (low privileges) can in...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi endpoint, caused by an unsized sprintf call when processing form values. An attacker with low privileges can submit crafted input to this CGI to overflow the stack buffer, potentially ach...

CVE-2026-76860

Netcore NR255-V version 1.5.130703 is affected by a stack-based buffer overflow in the wake_up_set.cgi endpoint. The root cause is unbounded tokenization of MAC and ID input , allowing a network attacker with low privileges to supply crafted values that overflow the stack buffer and corrupt progr...

CVE-2026-76859

Netcore NR255-V version 1.5.130703 is affected by a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can leverage ui_config_2.xml and misc.js to disclose router credentials, resulting in a high confidentiality impact with no integrity or ...

CVE-2026-76857

Netcore NR255-V firmware version 1.5.130703 is affected by a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related components (DDNSset_cgi, IGD_GetCgiHandler, IGD_CgiCall). An authenticated low-privilege attacker who reaches this CGI handler can obtain ...

CVE-2026-76858

Netcore NR255-V version 1.5.130703 is affected by a stored cross-site scripting (XSS) vulnerability in ddns_wan_list_show.cgi , caused by unsafe use of eval() to process DDNS data. An attacker with access to the DDNS configuration path can inject a malicious script that executes persistently when...

CVE-2026-76856

Netcore NR255-V firmware version 1.5.130703 is affected by a cross-site request forgery (CSRF) vulnerability in the wan_config_set_cgi , wan_num_set_cgi , and lan_ip_change_cgi endpoints. An unauthenticated attacker can craft forged requests that, when triggered by an authenticated administrator,...

CVE-2026-76855

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in its audit endpoints, specifically in l7_web_auth_log_dump_cgi.c , audit_get_cgi.c , and mod_dispatch_auth/plan.json . Attackers with low privileges can query these components to obtain other users' ses...

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the l7_web_auth_user_show.cgi component, related to captive-portal credential handling. A network-based attacker with low privileges can query this endpoint to obtain captive-portal user credentials, c...

CVE-2026-76853

Netcore NR268 firmware version 1.7.121109 is affected by a security check bypass in the parame_put_file.cgi restore archive prefix validation. The root cause is a flawed prefix check in put_parame_file_cgi.c , which allows an attacker with low privileges to bypass restricted restore archive handl...

CVE-2026-76852

Netcore NR268 firmware version 1.7.121109 is affected by an improper integrity verification flaw in mtd_write that allows forged firmware authenticity checks. Attackers with network access and low privileges can exploit put_file.cgi and check_image_uuid.c to bypass firmware signature validation a...

CVE-2026-83368

CVE-2026-83368 affects the Compiler component of Oracle GraalVM for JDK , Oracle GraalVM Enterprise Edition , and Oracle GraalVM (Oracle Java SE). Affected versions include Oracle GraalVM for JDK 17 (23.0.13.1), Oracle GraalVM for JDK 21 (23.1.12.1), Oracle GraalVM Enterprise Edition (21.3.19.1),...

CVE-2026-83408

CVE-2026-83408 affects the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM (part of Oracle Java SE). Affected supported versions are GraalVM for JDK 17: 23.0.13.1, GraalVM for JDK 21: 23.1.12.1, and GraalVM: 25.0.4.1. The vulnerability allows an unauthenticated attacker with netwo...

CVE-2026-83357

Oracle GraalVM for JDK / Oracle GraalVM (Oracle Java SE, component: Compiler ) contains a vulnerability in affected supported versions: GraalVM for JDK 17 (23.0.13.1), GraalVM for JDK 21 (23.1.12.1), and GraalVM 25.0.4.1. An unauthenticated attacker with network access via HTTP can exploit this f...

CVE-2026-82567

mySCADA myPRO Manager exposes an unauthenticated HTTP endpoint in its notification gateway that accepts a phone number and message to send SMS via a connected GSM modem. Because no credentials are required, any attacker with adjacent network access can trigger arbitrary SMS messages through the d...