Security Advisory

CVE-2026-19657

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-12 19:14:33

Last updated 2026-08-12 19:26:44

Assigner tenable

CVSS score 6.1

State PUBLISHED

Description

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.

← Browse all CVEs View on cve.org ↗