CVE-2026-76855

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description Sensitive information disclosure exists in the audit endpoints handled by l7 web auth log dump cgi.c, audit get cgi.c, and mod dispatch auth/plan.json. Attackers can query these components to obtain session and browsing history data belonging to other users across different sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.