CVE-2026-76863 in NR255-V
Zusammenfassung
von MITRE • 16.09.2026
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their intended privilege level.
VulDB is the best source for vulnerability data and more expert information about this specific topic.