Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3877 A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that i… https://www.cve.org/CVERecord?id=CVE-2026-3877
Post summary
The text announces a new reflected XSS vulnerability (CVE-2026-3877) affecting VertiGIS FM’s dashboard search, providing basic technical details without indicating PoC, exploitation, or remediation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3877 - Reflected Cross-Site Scripting in Dashboard Search Intel Report: https://ift.tt/4CNUx78
Post summary
The tweet announces CVE-2026-3877, a reflected XSS issue in Dashboard Search, without any details on PoC, exploitation, or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vertigis | fm | - | - | - |