CVE-2026-76868

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description A null pointer dereference occurs in the 'route policy add.cgi' endpoint when the exit port parameter is missing. A null pointer dereference is a condition where a program attempts to read or write to a memory address that is null, typically causing the application to crash. An attacker can trigger this by sending requests without the exit port field, leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the exit port parameter in the 'route policy add.cgi' endpoint until the issue is resolved.