Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-76872

Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcp_add_staticip_cgi, dhcp_staticip_show_cgi, ip_acl_set_cgi, and ip_acl_show_cgi. Attackers can inject persistent malicious scripts through these components to compromise the web management interface for other users.'

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netcore NR255-V

Default version status: unaffected

  • 1.5.130703affected

References