CVE-2026-76870

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description An out-of-bounds read occurs in the mtd write pre-flash validation routine when short firmware uploads are processed. An attacker can upload a truncated firmware image through the put file cgi.c endpoint to trigger out-of-bounds reads across main.c, check image uuid.c, and oemMD5Update.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.