Medium severityNVD Advisory· Published Aug 11, 2026

CVE-2026-18247

Description

A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.

Affected products

Athoc/IWSllm-create
Range: <7.21 HF-734
Blackberry/AtHocllm-fuzzy
Range: <7.21 HF-734

Patches

Vulnerability mechanics

References

support.blackberry.com/pkb/s/article/141248nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000