CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory.

  • Published Sep 15, 2026
  • CVSS 8.6 high
  • 0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-76869 at the National Vulnerability Database