Is CVE-2026-92255 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-92255?

CVE-2026-92255 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-92255

Description

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi caused by improper use of a string handling API. Attackers can trigger an unterminated buffer over-read by exploiting this flaw in the affected component, potentially exposing adjacent memory contents.