CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product netcore:nr255_v. Show all products

23 CVEs, showing 1 to 23
CVESeverityTitlePublished
CVE-2026-92257Medium 5.4Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-92256Medium 6.5Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-92255Medium 5.4Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76873Medium 5.2Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76872Medium 5.4Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76871Medium 6.5Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76870High 7.1Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76869High 7.2Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76868Medium 4.9Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76867Medium 5.4Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76866High 7.2Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76865Medium 4.9Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76864Medium 4.8Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76863Medium 4.3Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76862High 8.8Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76861High 8.8Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76860High 8.8Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76859Medium 6.5Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76858Medium 4.8Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76857Medium 6.5Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76856High 8.1Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76855Medium 6.5Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints
Assigned by VulnCheck
Sep 15, 2026
CVE-2026-76854Medium 6.5Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi
Assigned by VulnCheck
Sep 15, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.