VulnSocial

CVE-2026-19876

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who opens a crafted link. An unsanitized request parameter is reflected without output encoding. Fixed in ULite 5.0.2.1 BN50.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-07: 111-07
Referenced assets4 URLs
Full discourse1 post
  • 테크워처@TheHour2359

    원문 https://pwn.watch/i/infinitt-ulite-share-link-brute-force-xss-nov-2026 INFINITT 공식 권고https://www.infinitt.com/contents/content.php?url=INFINITT-SA-2026-001 CVE-2026-19877 https://nvd.nist.gov/vuln/detail/CVE-2026-19877 CVE-2026-19876 https://nvd.nist.gov/vuln/detail/CVE-2026-19876

    0000030
    2.2K followersView on X

Explore more

Back to dashboard