VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 12, 2026· Updated Aug 25, 2026

CVE-2026-19657

CVE-2026-19657

Description

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Scada Lts/Scadaltsllm-fuzzy2 versions
    <=2.7.8.1+ 1 more
    • (no CPE)range: <=2.7.8.1
    • cpe:2.3:a:scada-lts:scada-lts:2.7.8.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.