Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-76856

Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints

CVSS 4.0 7.0 HIGHCVSS 3.1 8.1 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-76856

Published

Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_change_cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration settings without consent.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76856

Published

NR255-V

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Netcore",
                    "product": "NR255-V",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "1.5.130703",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON