High severity8.8NVD Advisory· Published Sep 15, 2026· Updated Sep 16, 2026

CVE-2026-76860

Description

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netcore/NR255-Vllm-fuzzy
Range: 1.5.130703
Draw Ctf/Netcore Router Public Refsllm-fuzzy
Range: 1.5.130703

Patches

Vulnerability mechanics

References

github.com/draw-ctf/netcore-router-public-refs/blob/main/2026.08.19-netcore-nr255v-wake-up-set-overflow.mdnvd
www.vulncheck.com/advisories/netcore-nr255-v-1.5.130703-stack-based-buffer-overflow-in-wake-up-set-cgi-via-mac-and-id-tokenizationnvd

News mentions

Draw Ctf Netcore Routers: 24 Vulnerabilities Disclosed, Ranging from XSS to Firmware Exploits
Vypr Intelligence · Sep 15, 2026

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000