CVE-2026-76856

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description Cross-site request forgery occurs when an attacker tricks a user's browser into performing an unwanted action on a different website where the user is authenticated. This issue affects the 'wan config set cgi', 'wan num set cgi', and 'lan ip change cgi' endpoints, allowing attackers to craft forged requests that trick authenticated administrators into modifying WAN or LAN network configuration settings without consent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.