CVE-2026-73446

CVE-2026-73446 affects Arista EOS on multiple hardware platforms (710, 720D, 720XP, 750X, 7010TX, 7020R, 7130, 7170, 7050X, 7060X, 7260X, 7280R, 7300X, 7320X, 7358X4, 7368X4, 7388X5, 7500R, 7800R, 7700R, AWE, CloudEOS, cEOS/vEOS-lab, CloudVision eXchange). When IS-IS is configured on a broadcast ...

CVE-2025-11395

Podman is affected by an arbitrary file write vulnerability that occurs when importing an OCI archive via the podman load command. An attacker who can supply a crafted tar archive to this command can create files on the host with the privileges of the user running Podman. The flaw is scored CVSS ...

CVE-2026-85893

Microsoft Edge (Chromium-based) contains a use-after-free vulnerability that allows an unauthorized attacker to achieve elevation of privileges over a network. The CVSS 3.1 base score is 8.8 (High) , with an attack vector of network, low complexity, no required privileges, but user interaction is...

CVE-2026-69486

CVE-2026-69486 is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires user inte...

CVE-2026-92248

CVE-2026-92248 is a heap-based buffer overflow in the file-psd plugin of GIMP . When GIMP generates a thumbnail preview for a specially crafted PSD file, an integer overflow occurs during multiplication of values from an embedded JPEG header, causing an undersized heap allocation. The subsequent ...

CVE-2026-92257

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in its L7 content management pages, specifically in the call board text and policy group handling components, which use eval() sinks to process input. Attackers with low privileges can inject persistent script...

CVE-2026-92256

Netcore NR255-V router version 1.5.130703 is affected by a sensitive information disclosure vulnerability in the l2tpd_config_show_cgi.c , ipsec_show_cgi.c , and mod_vpn_remote/plan.json read handlers. An attacker with low privileges can query l2tpd_config_show.cgi to expose stored IPsec PSK and ...

CVE-2026-92255

Netcore NR255-V router version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi, caused by improper use of a string handling API that leads to an unterminated buffer over-read. An authenticated attacker (low privileges) over the network can trigger the flaw, pote...

CVE-2026-76873

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting (XSS) vulnerability in the DHCP dynamic IP display and ARP bind list display components. A LAN-based attacker can inject a malicious script via the hostname fields , which is subsequently rendered by network_config.js and n...

CVE-2026-76872

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting (XSS) vulnerability in its DHCP static IP and IP ACL management pages. The affected CGI components are dhcp_add_staticip_cgi , dhcp_staticip_show_cgi , ip_acl_set_cgi , and ip_acl_show_cgi . An attacker with low pr...

CVE-2026-76871

Netcore NR255-V router, version 1.5.130703 , is affected by a sensitive information disclosure vulnerability spanning four components: mod_vpn_remote/plan.json , pptpd_user_show.cgi , pptp_client_config_show.cgi , and l2tpd_user_show.cgi . An attacker with low privileges over the network can leve...

CVE-2026-76870

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine. An attacker with low privileges can upload a truncated firmware image via put_file_cgi.c , triggering out-of-bounds reads across main.c , check_image_uuid.c , and oemMD5U...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the reboot_timer_set.cgi endpoint, caused by improper sscanf token parsing . An attacker with authenticated access can submit crafted input to corrupt stack memory, potentially leading to code execution or service disrup...

CVE-2026-76867

Netcore NR255-V (firmware 1.5.130703 ) is affected by a stored cross-site scripting (XSS) vulnerability in four routing and NAT configuration CGI handlers: routing_tab_add_cgi , routing_table_list_show_cgi , route_policy_add_cgi , and route_policy_parame_show_cgi . Attackers with low privileges c...

CVE-2026-76868

Netcore NR255-V version 1.5.130703 is affected by a null pointer dereference in route_policy_add.cgi , triggered when a request omits the exit_port parameter. An authenticated attacker (high privileges required) can send a crafted request to cause a denial of service . The vulnerability is rated ...

CVE-2026-76866

Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...

CVE-2026-76865

Netcore NR255-V (version 1.5.130703) is affected by a null pointer dereference in its QoS setter CGI handlers, specifically filter_conn_del_cgi.c and gre_prio_set_cgi.c , caused by unchecked atoi() results. An attacker with high-level privileges can supply crafted input to these handlers to trigg...

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling, specifically within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry...

CVE-2026-76864

Netcore NR255-V version 1.5.130703 suffers from a stored cross-site scripting (XSS) vulnerability in its QoS management interface. QoS rule names are not sanitized before being parsed via eval() in the qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and qos_filter_show_cgi CGI handlers...

CVE-2026-76862

Netcore NR255-V (version 1.5.130703) is affected by an OS command argument injection vulnerability in the Nettools tcpdump launch paths , specifically the ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. An authenticated attacker (low privileges) can in...