Unrated severityNVD Advisory· Published Sep 4, 2026

CVE-2026-79418

Description

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EMX Tecnologia/Gestao Xllm-create
Range: <=8.4

Patches

Vulnerability mechanics

References

drive.google.com/file/d/1mp-uS-tAthH9FAObfx1D3lOM7IIjRsmE/viewnvd
emxtecnologia.com.br/gestao-x-business-suite/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000