Beveiligingsadvies

CVE-2026-76873

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 21:58:03
Laatst bijgewerkt 2026-09-16 19:01:53
Toegewezen door VulnCheck
CVSS-score 5.2
Status PUBLISHED

Beschrijving

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by network_config.js and network_security.js in the web management interface.