Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Netcore — Vulnerabilities & Security Advisories 56

Browse all 56 CVE security advisories affecting Netcore. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Netcore provides email marketing and customer engagement solutions, enabling businesses to manage email campaigns and customer communications. Historically, the platform has been susceptible to various vulnerability classes, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation, with four CVEs documented to date. These vulnerabilities often stem from insufficient input validation and improper access controls in web interfaces and APIs. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates ongoing security challenges that require continuous patching and robust input sanitization to prevent potential exploitation by malicious actors.

Found 23 results / 56 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-92257 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-92256 Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-92255 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse — NR255-V CWE-125 5.4 Medium 2026-09-15
CVE-2026-76873 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields — NR255-V CWE-79 5.2 Medium 2026-09-15
CVE-2026-76872 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-76871 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76870 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation — NR255-V CWE-125 7.1 High 2026-09-15
CVE-2026-76869 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi — NR255-V CWE-121 7.2 High 2026-09-15
CVE-2026-76868 Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port — NR255-V CWE-476 4.9 Medium 2026-09-15
CVE-2026-76867 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers — NR255-V CWE-79 5.4 Medium 2026-09-15
CVE-2026-76866 Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters — NR255-V CWE-88 7.2 High 2026-09-15
CVE-2026-76865 Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers — NR255-V CWE-476 4.9 Medium 2026-09-15
CVE-2026-76864 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names — NR255-V CWE-79 4.8 Medium 2026-09-15
CVE-2026-76862 Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths — NR255-V CWE-88 8.8 High 2026-09-15
CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes — NR255-V CWE-863 4.3 Medium 2026-09-15
CVE-2026-76861 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi — NR255-V CWE-121 8.8 High 2026-09-15
CVE-2026-76860 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization — NR255-V CWE-121 8.8 High 2026-09-15
CVE-2026-76859 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76858 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi — NR255-V CWE-79 4.8 Medium 2026-09-15
CVE-2026-76857 Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15
CVE-2026-76855 Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints — NR255-V CWE-359 6.5 Medium 2026-09-15
CVE-2026-76856 Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints — NR255-V CWE-352 8.1 High 2026-09-15
CVE-2026-76854 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi — NR255-V CWE-522 6.5 Medium 2026-09-15

This page lists every published CVE security advisory associated with Netcore. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.