Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitation of the SYSNAM configuration parameter during configuration file import. An attacker with administrator access can inject malicious script into the device configuration, which may be stored and executed in the administrator’s browser when the affected interface is viewed. Successful exploitation may allow session cookie theft, unauthorized configuration changes, or access to sensitive information exposed through the management interface.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-29 | 1 | Disclosure1 |
| 2026-05-30 | 1 | General1 |
CVE-2026-34127 Stored Cross-Site Scripting in TP-Link TL-SG108PE v5 Web Management Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34127
Post summary
A CVE has been released for a Stored Cross‑Site Scripting flaw in the TP‑Link TL‑SG108PE v5 web interface, but no additional details on PoC, exploitation, patching, or debunking are provided.
CVE-2026-34127 A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitation of … https://www.cve.org/CVERecord?id=CVE-2026-34127
Post summary
The post reports a stored cross‑site scripting flaw (CVE‑2026‑34127) in the TP‑Link TL‑SG108PE v5 switch web management interface, noting improper input sanitation and linking to the CVE record.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tl-sg108pe | 5.0 | - | - |
| OS | tp-link | tl-sg108pe_firmware | 1.0.1 | - | - |