Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-92255 EUVD-2026-80046GHSA-2636-fg22-863m

Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse

Published Sep 15, 2026 · Updated Sep 21, 2026 · Assigned by VulnCheck

Description

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Attackers can trigger an unterminated buffer over-read by exploiting this flaw in the affected component, potentially exposing adjacent memory contents.

Affected products

VendorProductAffectedFixed
Netcore NR255-V 1.5.130703 —

References