Security Advisory

CVE-2026-76857

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 21:57:52

Last updated 2026-09-17 16:53:15

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing sensitive account information.

← Browse all CVEs View on cve.org ↗