NR
Product
NR255-V
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 16Low 0
Watch
Add NR255-V to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92256 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers Affected: 1.5.130703 |
| CVE-2026-76871 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers Affected: 1.5.130703 |
| CVE-2026-76859 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi Affected: 1.5.130703 |
| CVE-2026-76857 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi Affected: 1.5.130703 |
| CVE-2026-76855 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints Affected: 1.5.130703 |
| CVE-2026-76854 | 6.5 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi Affected: 1.5.130703 |
| CVE-2026-92257 | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks Affected: 1.5.130703 |
| CVE-2026-92255 | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse Affected: 1.5.130703 |
| CVE-2026-76872 | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages Affected: 1.5.130703 |
| CVE-2026-76867 | 5.4 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers Affected: 1.5.130703 |
| CVE-2026-76873 | 5.2 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields Affected: 1.5.130703 |
| CVE-2026-76868 | 4.9 | Sep 15 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port Affected: 1.5.130703 |
| CVE-2026-76865 | 4.9 | Sep 15 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers Affected: 1.5.130703 |
| CVE-2026-76864 | 4.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names Affected: 1.5.130703 |
| CVE-2026-76858 | 4.8 | Sep 15 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi Affected: 1.5.130703 |
| CVE-2026-76863 | 4.3 | Sep 15 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes Affected: 1.5.130703 |
Showing 16