Beveiligingsadvies

CVE-2026-76867

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 21:57:59
Laatst bijgewerkt 2026-09-15 21:57:59
Toegewezen door VulnCheck
CVSS-score 5.4
Status PUBLISHED

Beschrijving

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including routing_tab_add_cgi, routing_table_list_show_cgi, route_policy_add_cgi, and route_policy_parame_show_cgi. Attackers can inject persistent script payloads through these route and NAT configuration pages, which are then executed in the context of users viewing the affected pages.