Sensitive Information Disclosure in Netcore NR255-V
CVE-2026-76863
5.3MEDIUM
What is CVE-2026-76863?
The Netcore NR255-V version 1.5.130703 contains a vulnerability that allows authenticated users with broad roles to access sensitive information through QoS read routes. This vulnerability enables unauthorized access to live network telemetry data, which may expose critical network information beyond the users' privilege levels. Proper measures need to be taken to secure access rights and mitigate potential information leaks.
Affected Version(s)
NR255-V 1.5.130703
References
CVSS V4
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Zhou Ao
Yin Luxing
Jiang Yuxuan
Liu Xin
@Nebusec