CVE-2026-76872 is a stored cross-site scripting vulnerability affecting Netcore NR255-V version 1.5.130703. The flaw exists in the DHCP static IP and IP ACL management pages, specifically in the dhcp_add_staticip_cgi, dhcp_staticip_show_cgi, ip_acl_set_cgi, and ip_acl_show_cgi components. Attackers can inject persistent malicious scripts that execute in the context of other users accessing the web management interface, potentially leading to unauthorized actions or information disclosure within the management interface.

Successful exploitation allows an attacker with at least limited privileges to inject persistent scripts into the web management interface, which execute when other users access affected pages. This can lead to compromise of user sessions or unauthorized actions within the management interface. The CVSS score of 5.1 reflects a medium impact with network attack vector, low complexity, and limited privileges required.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web management interface to trusted users only and consider monitoring for suspicious activity related to DHCP static IP and IP ACL management pages.