Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument SortBy leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-2546 Cross-Site Scripting in LigeroSmart via SortBy Argument in /otrs/index.pl https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2546
Post summary
The post announces CVE-2026-2546, a cross‑site scripting flaw in LigeroSmart triggered by the SortBy parameter in /otrs/index.pl, with no PoC, exploit, or patch details included.
CVE-2026-2546 A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the… https://www.cve.org/CVERecord?id=CVE-2026-2546
Post summary
The text announces CVE‑2026‑2546 as a vulnerability in LigeroSmart up to version 6.1.26, noting it involves an unknown function in /otrs/index.pl, but provides no further technical details, PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ligerosmart | ligerosmart | - | - | - |