CVE-2026-92257 Netcore CVE debrief

Who should care

Defenders responsible for Netcore NR255-V version 1.5.130703 deployments should assess exposure and prioritize verification and mitigation efforts due to the potential for malicious code execution in user contexts. Defenders should also consider the feasibility of exploitation and implement compensating controls to mitigate potential attacks.

Why it matters

CVE-2026-92257 is a stored cross-site scripting vulnerability affecting Netcore NR255-V version 1.5.130703, allowing attackers to inject persistent script payloads and execute malicious code in the context of other users. Defenders should prioritize verifying exposure, assessing exploitation feasibility, and implementing compensating controls.

• Potential for malicious code execution in the context of other users
• Possible injection of persistent script payloads through L7 content management pages
• Required verification of exposure and feasibility of exploitation
• Need for compensating controls to mitigate potential attacks

Technical summary

The vulnerability is located in L7 content management pages that use eval() sinks, specifically in the call board text and policy group handling components of Netcore NR255-V version 1.5.130703. An attacker can inject persistent script payloads through these pages, leading to malicious code execution in the context of other users viewing the affected content. This vulnerability allows for potential code execution in user contexts, emphasizing the need for defenders to prioritize verifying exposure and assessing exploitation feasibility.

Defensive priority

Defenders should prioritize verifying exposure of Netcore NR255-V version 1.5.130703 to this vulnerability and assess the feasibility of exploitation.

Recommended defensive actions

• Verify exposure of Netcore NR255-V version 1.5.130703 to this vulnerability
• Assess the feasibility of exploitation
• Implement compensating controls to mitigate potential attacks
• Monitor for suspicious activity related to this vulnerability
• Review relevant logs for exposed assets that need extra review
• Track exceptions and retest remediated assets
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, but information on exploitation, impact, and remediation is limited. Defenders should verify exposure of Netcore NR255-V version 1.5.130703 and assess the feasibility of exploitation with limited available details. Additional verification tasks are required due to the limited source detail.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.