CVE-2026-76858 in NR255-Vالمعلومات

الملخص

بحسب MITRE • 16/09/2026

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused by unsafe eval() handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

VulnCheck

حجز

19/08/2026

إفشاء

16/09/2026

الاعتدال

تمت الموافقة

إدخال

VDB-404953

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!