Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Netcore — Vulnerabilities & Security Advisories 56

Browse all 56 CVE security advisories affecting Netcore. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Netcore provides email marketing and customer engagement solutions, enabling businesses to manage email campaigns and customer communications. Historically, the platform has been susceptible to various vulnerability classes, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation, with four CVEs documented to date. These vulnerabilities often stem from insufficient input validation and improper access controls in web interfaces and APIs. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates ongoing security challenges that require continuous patching and robust input sanitization to prevent potential exploitation by malicious actors.

CVE ID Title CVSS Severity Published
CVE-2026-76873 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields — NR255-V CWE-79 5.2 Medium 2026-09-15
CVE-2026-76872 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-76871 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76870 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation — NR255-V CWE-125 7.1 High 2026-09-15
CVE-2026-76868 Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port — NR255-V CWE-476 4.9 Medium 2026-09-15
CVE-2026-76869 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi — NR255-V CWE-121 7.2 High 2026-09-15
CVE-2026-76867 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-76866 Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters — NR255-V CWE-88 7.2 High 2026-09-15
CVE-2026-76865 Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers — NR255-V CWE-476 4.9 Medium 2026-09-15
CVE-2026-76864 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names — NR255-V CWE-79 4.8 Medium 2026-09-15
CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes — NR255-V CWE-863 4.3 Medium 2026-09-15
CVE-2026-76862 Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths — NR255-V CWE-88 8.8 High 2026-09-15
CVE-2026-76861 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi — NR255-V CWE-121 8.8 High 2026-09-15
CVE-2026-76860 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization — NR255-V CWE-121 8.8 High 2026-09-15
CVE-2026-76859 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76858 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi — NR255-V CWE-79 4.8 Medium 2026-09-15
CVE-2026-76857 Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76856 Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints — NR255-V CWE-352 8.1 High 2026-09-15
CVE-2026-76855 Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints — NR255-V CWE-359 6.5 Medium 2026-09-15
CVE-2026-76854 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76852 Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write — NR268 CWE-354 8.8 High 2026-09-15
CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi — NR268 CWE-353 8.1 High 2026-09-15
CVE-2026-4840 Netcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection — Power 15AX CWE-78 8.8 High 2026-03-26
CVE-2025-5147 Netcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection — NBR1005GPEV2 CWE-77 6.3 Medium 2025-05-25
CVE-2025-5146 Netcore NBR200V2 HTTP Header routerd passwd_set command injection — NBR1005GPEV2 CWE-77 6.3 Medium 2025-05-25
CVE-2025-5145 Netcore POWER13 Query String cgi-bin command injection — NBR1005GPEV2 CWE-77 6.3 Medium 2025-05-25

This page lists every published CVE security advisory associated with Netcore. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.