AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-18247

MEDIUM · CVSS 5.3 EPSS 0.42%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A Cross Site Scripting (XSS) vulnerability exists in the Web Portals of AtHoc IWS prior to version 7.21 HF-734, allowing attackers to execute actions within the context of a victim's session. This could lead to unauthorized access or manipulation of user data. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.

CVE
CVE-2026-18247
Severity
MEDIUM
CVSS
5.3
EPSS
0.42%

Original NVD Description

A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.