Is CVE-2026-76862 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-76862?

CVE-2026-76862 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-76862

Description

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.