High severity · published Sep 15, 2026
CVE-2026-76860
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NR
NR255-V · Netcore
1.5.130703 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-76860
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-76860
github.com
https://github.com/draw-ctf/netcore-router-public-refs/blob/main/2026.08.19-netcore-nr255v-wake-up-set-overflow.md
www.vulncheck.com
https://www.vulncheck.com/advisories/netcore-nr255-v-1.5.130703-stack-based-buffer-overflow-in-wake-up-set-cgi-via-mac-and-id-tokenization
More from NR255-V
8.8
CVE-2026-76862
Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
8.8
CVE-2026-76861
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
8.1
CVE-2026-76856
Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints
7.2
CVE-2026-76869
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi
7.2
CVE-2026-76866
Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters