CVE-2026-76857

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description An information disclosure issue exists in the 'ddns wan list show.cgi' endpoint and the DDNSset cgi, IGD GetCgiHandler, and IGD CgiCall components. An attacker accessing this CGI handler can retrieve plaintext DDNS credentials, leading to the exposure of sensitive account information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the 'ddns wan list show.cgi' endpoint to minimize the risk of exploitation.