CVE-2026-92257

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703

Description A stored cross-site scripting issue exists in L7 content management pages that utilize eval() sinks, specifically impacting the call board text and policy group handling components. This allows attackers to inject persistent script payloads that execute malicious code within the session of other users who view the affected content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.