EUVD-2026-76750
GHSA-w76j-wwhj-ch25
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible reflected XSS; no auth needed; user click required (UI:R); scope changes to victim browser context (S:C); low C/I as session data exposed but no RCE or data destruction.
Primary rating from Vendor (hq).
CVSS VectorVendor: hq
Lifecycle Timeline
1DescriptionCVE.org
A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This allows an unauthenticated network attacker to craft a link that, when visited by a user, executes arbitrary script in the context of the affected application and can redirect the user's browser to an arbitrary external site. Successful exploitation could allow an attacker to act with the compromised user's session privileges within the application.
AnalysisAI
Reflected cross-site scripting and open redirect in an ICS inventory management web interface allows unauthenticated network attackers to craft malicious URLs that, when clicked by a legitimate user, execute arbitrary JavaScript within the application's browser context. The vulnerable endpoint reflects a URL segment into both a JavaScript execution sink and an anchor href attribute without output encoding, enabling both script injection and browser hijacking from a single crafted request. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The vulnerable endpoint is reachable without authentication (PR:N/AV:N), so no credentials are needed to craft or host the malicious URL. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 5.3 (Medium) appropriately reflects the two primary mitigants: passive user interaction is required (UI:P - the victim must click the link) and impact is limited to low confidentiality and integrity on the vulnerable system (VC:L/VI:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult ICS-CERT advisory ICSA-26-254-01 directly at https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json for vendor-released patch details and exact fixed versions, which were not independently confirmed in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today