CVE-2026-76854

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description An issue exists in the handling of captive-portal credentials. An attacker can query the 'l7 web auth user show.cgi' endpoint to obtain captive-portal user credentials, which compromises the confidentiality of authenticated network access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.