← CVE Intelligence

CVE-2026-19657

ScadaLTS Unauthenticated Reflected XSS PUBLISHED

Description (CNA)

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.

Affected (CNA)

Vendor / productVersions
SCADA-LTS / ScadaLTSaffected 2.7.8.1

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.