CVE-2026-76863

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description An issue exists in the handling of plan.json within the mod qos bandwidth component, specifically inside filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry, exceeding their intended privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.