CVE-2026-66247
iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with includ…
Published: 2026-10-01 · CVSS: 4.3 · CVSS 3.1
iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enabling an attacker to access and exfiltrate sensitive data within the context of the victim's active session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7