CVE-2026-76857

Received Received - Intake

Sensitive Information Disclosure in Netcore NR255-V Firmware

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulnCheck

Description

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing sensitive account information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76857

EUVD

EUVD-2026-80060

Affected Vendors & Products

Vendor	Product	Version / Range
netcore	nr255-v	1.5.130703

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability is a sensitive information disclosure issue in Netcore NR255-V firmware version 1.5.130703. It affects the ddns_wan_list_show.cgi endpoint and related components like DDNSset_cgi, IGD_GetCgiHandler, and IGD_CgiCall. Attackers can access plaintext DDNS credentials through these handlers, exposing sensitive account information.

Detection Guidance

To detect this vulnerability, check if your Netcore NR255-V device is running firmware version 1.5.130703 or earlier. Inspect network traffic for requests to the vulnerable endpoints like ddns_wan_list_show.cgi, DDNSset_cgi, IGD_GetCgiHandler, or IGD_CgiCall. Look for plaintext transmission of DDNS credentials.

Impact Analysis

This vulnerability allows attackers to obtain plaintext DDNS credentials, which could lead to unauthorized access to your DDNS accounts. This may result in data breaches, loss of control over domain names, or further network compromise if the credentials are reused elsewhere.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized access to sensitive information. GDPR requires protection of personal data, while HIPAA mandates safeguarding protected health information. A breach could result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update the Netcore NR255-V firmware to the latest version that addresses this vulnerability. Disable or restrict access to the vulnerable CGI endpoints if an update is not immediately available. Ensure DDNS credentials are not transmitted in plaintext by enabling encryption for such communications.

Hi! I’m here to help you understand CVE-2026-76857. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70