CVE-2026-76860

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description A stack-based buffer overflow exists in the 'wake up set.cgi' endpoint. This issue is caused by unbounded tokenization of the MAC and ID input variables. An attacker can provide specially crafted values for these variables to overflow the stack buffer and corrupt program memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the 'wake up set.cgi' endpoint to minimize the risk of exploitation.