CVE-2026-76867

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description A stored cross-site scripting issue exists within the routing and NAT configuration CGI components. Attackers can inject persistent script payloads through the route and NAT configuration pages, which are then executed in the context of users viewing the affected pages. The affected CGI components include routing tab add cgi, routing table list show cgi, route policy add cgi, and route policy parame show cgi.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.