Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92257

Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks

CVSS 4.0 5.1 MEDIUMCVSS 3.1 5.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92257

Published

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious code executed in the context of other users viewing the affected content.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92257

Published

NR255-V

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Netcore",
                    "product": "NR255-V",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "1.5.130703",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON