CVE-2026-6371

LimRAD NAC versions prior to 5.5.7.3.9 are vulnerable to a stored cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts that execute in the context of users accessing the affected application, potentially leading to data theft or session hijacking. Organizations using LimRAD NAC should prioritize patching to mitigate the risk associated with this vulnerability.