Medium severity4.3NVD Advisory· Published Sep 15, 2026

CVE-2026-90848

Description

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Governikus/AusweisAppllm-create
Range: <=2.5.4

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-90848nvd
vuldb.com/submit/925923nvd
vuldb.com/vuln/403403nvd
vuldb.com/vuln/403403/ctinvd
www.governikus.de/loesungen/kundenprojekte/AusweisApp/nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000