Security Advisory

CVE-2026-26724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-20 00:00:00
Last updated 2026-02-26 22:06:41
Assigner mitre
State PUBLISHED

Description

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.