Threats tagged 'ghsa-r4gj-cj22-7v4x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-76867Netcore NR255-V · Cross-site Scripting Medium5.1EPSS 0.2%2026-09-15CVE Database V5CVE-2026-76867 Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI components including routing_tab_add_cgi, routing_table_list_show_cgi, route_policy_add_cgi, and route_policy_parame_show_cgi. Attackers can inject persistent script payloads through these route and NAT configuration pages, which are then executed in the context of users viewing the affected pages. EPSS 0.2%Vulnerability #ghsa-r4gj-cj22-7v4x	CVE Database V5	2026-09-15

Page 1 of 1