CVE-2026-19657 — ScadaLTS Unauthenticated Reflected XSS
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute …
Published: 2026-08-12 · CVSS: 6.1 · CVSS 3.1
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7