CVE-2026-40464 — A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the wor…
Published: 2026-08-31 · CVSS: 5.4 · CVSS 3.1
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7