CVE-2026-76858 in NR255-Vinformación

Resumen

por MITRE • 2026-09-16

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused by unsafe eval() handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-08-19

Divulgación

2026-09-16

Moderación

aceptado

Artículo

VDB-404953

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-76858
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-76858
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-76858/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!