CVE-2026-76857: Insufficiently Protected Credentials in Netcore NR255-V
Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing sensitive account information.
AI Analysis
Technical Summary
CVE-2026-76857 is a sensitive information disclosure vulnerability in Netcore NR255-V firmware version 1.5.130703. The flaw exists in the ddns_wan_list_show.cgi endpoint and associated DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. An attacker with access to this CGI handler can retrieve plaintext DDNS credentials, exposing sensitive account information. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed.
Potential Impact
An attacker who can access the vulnerable CGI endpoint can obtain plaintext DDNS credentials, which compromises sensitive account information. This could lead to unauthorized access or misuse of DDNS services associated with the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the vulnerable CGI endpoints to trusted users only.
CVE-2026-76857: Insufficiently Protected Credentials in Netcore NR255-V
Description
Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing sensitive account information.
CVSS v4.0
Score 7.1high
Affected software
Netcore
NR255-V
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-76857 is a sensitive information disclosure vulnerability in Netcore NR255-V firmware version 1.5.130703. The flaw exists in the ddns_wan_list_show.cgi endpoint and associated DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. An attacker with access to this CGI handler can retrieve plaintext DDNS credentials, exposing sensitive account information. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed.
Potential Impact
An attacker who can access the vulnerable CGI endpoint can obtain plaintext DDNS credentials, which compromises sensitive account information. This could lead to unauthorized access or misuse of DDNS services associated with the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the vulnerable CGI endpoints to trusted users only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-19T21:47:08.935Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aa9c06c55bf5e2cf56f823e
Added to database: 09/15/2026, 22:02:20 UTC
Last enriched: 09/15/2026, 22:24:38 UTC
Last updated: 09/16/2026, 03:17:24 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.