Intelliops Event Management CVE-2026-56586

Exploitation requires: (1) HTTP access to Intelliops Event Management without X-Content-Type-Options header present, (2) network-layer MITM capability to intercept and modify responses (ARP spoofing, BGP hijacking, DNS redirection, or ISP-level access), (3) user browser interaction (victim must visit the application during attack window), and (4) application must reflect or process user-controlled input that could be executed as script. The high attack complexity (AC:H) reflects the practical difficulty of reliable MITM positioning. Default-configuration Intelliops Event Management installations are vulnerable; HTTPS with HSTS and proper header configuration are required to mitigate.

CVSS 3.1 (LOW) accurately reflects real-world risk despite the vendor description's reference to SSL stripping. The vector shows high attack complexity (AC:H), mandatory user browser interaction (UI:R), zero confidentiality loss (C:N), and low integrity impact only (I:L)-metrics inconsistent with active SSL interception, which would require confidentiality compromise. The actual threat is limited to content-sniffing XSS under specific preconditions: network MITM positioning, user browser access, and reflection of user-controlled input. No EPSS score, CISA KEV listing, or public exploit code provided. This is a real but low-priority vulnerability compared to network-exploitable flaws lacking prerequisites.

An attacker with network MITM capability (ARP spoofing on shared network, BGP hijacking, or DNS redirection) intercepts HTTP responses from Intelliops Event Management and modifies the response body to include malicious JavaScript. Without the X-Content-Type-Options header, the victim's browser executes the attacker's script, potentially stealing session cookies or credentials if the user interacts with injected forms. This scenario requires active network positioning and victim browser access during the attack window, limiting real-world frequency.