CVE-2026-1434 — Reflected XSS in Omega-PSIR

CVE-2026-1434

Reflected XSS in Omega-PSIR PUBLISHED

Description (CNA)

Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser. This issue was fixed in 4.6.7.

Affected (CNA)

Vendor / product	Versions
Politechnika Warszawska / Omega-PSIR	affected 4.5.9 through 4.6.6

CWE

CWE-79

References

https://cert.pl/posts/2026/02/CVE-2026-1434
https://www.omegapsir.io/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.