Medium severity4.3NVD Advisory· Published Nov 12, 2026· Updated Nov 12, 2026
CVE-2026-127120
CVE-2026-127120
Description
A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. This impacts an unknown function of the component StartPAOSResponse Handler. Performing a manipulation of the argument ResultMessage results in cross site scripting. The attack can be initiated remotely. Upgrading to version 2.6.0 will fix this issue. Upgrading the affected component is advised. This CVE was requested by the vendor.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.5.5
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.