Security Advisory

CVE-2026-4293

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-20 14:39:59
Last updated 2026-05-20 15:28:28
Assigner icscert
CVSS score 5.3
State PUBLISHED

Description

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.