Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This issue affects ZENworks Service Desk: 25.2, 25.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
CVE-2026-3278 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS).… https://www.cve.org/CVERecord?id=CVE-2026-3278
Post summary
The statement references CVE‑2026‑3278, a newly disclosed XSS vulnerability in OpenText ZENworks Service Desk, without any mention of PoC, exploits, active attacks, or patches.
🚨 New CVE Alert: CVE-2026-3278 poses significant risks with its remote code execution vulnerability! Ensure your systems are patched and your defenses are robust. Stay ahead of threats! 💻🔒 Read more: https://www.tenable.com/cve/CVE-2026-3278 #Cybersecurity #CVE #Infosec
Post summary
A new CVE‑2026‑3278 remote code execution vulnerability has been announced, with an urgent recommendation to patch affected systems.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opentext | zenworks_service_desk | 25.2 | - | - |
| App | opentext | zenworks_service_desk | 25.3 | - | - |