CVE-2026-76866

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description OS command argument injection occurs because the system builds root-run command lines using unquoted user-supplied DDNS input within the DDNSset cgi.c and ddns Proc.c components. Attackers can use unsanitized parameters to inject additional command arguments that are executed with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.