Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the universal search. This issue has been fixed in version 3.2.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-31880 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the universal search. This is… https://www.cve.org/CVERecord?id=CVE-2026-31880
Post summary
CVE-2026-31880 is a reported Reflected XSS vulnerability in Combodo iTop versions prior to 3.2.3, documented on the CVE list. No PoC, exploit, or remediation details are provided.
🚨*CVE* CVE-2026-31880 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the universal search. This is… https://www.cve.org/CVERecord?id=CVE-2026-31880 ----- Traducción: CVE-2026-31880 Com… http://infoflow.cloud`
Post summary
The post announces CVE-2026-31880, noting a reflected XSS flaw in Combodo iTop’s universal search, but does not provide a PoC, exploit, patch, or evidence of active exploitation.