Medium severity5.4NVD Advisory· Published Sep 15, 2026

CVE-2026-92257

Description

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious code executed in the context of other users viewing the affected content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netcore/NR255-Vllm-create
Range: 1.5.130703
Draw Ctf/Netcore Router Public Refsllm-create
Range: 1.5.130703

Patches

Vulnerability mechanics

References

github.com/draw-ctf/netcore-router-public-refs/blob/main/2026.08.19-netcore-nr255v-l7-content-stored-xss.mdnvd
www.vulncheck.com/advisories/netcore-nr255-v-1.5.130703-stored-cross-site-scripting-in-l7-content-management-via-eval-sinksnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000