Live › vulnerability › CVE-2026-105987
Go to dashboardKGS Software's tia Viewer does not validate input sent to its annotation API, so a logged-in attacker can store JavaScript inside a sticky-note annotation. When another user opens that document, the browser runs the script and the attacker can hijack that user's session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 15:32 UTC. All times on this page are UTC.
Teams that run KGS Software tia Viewer and let more than one user create or view annotated documents. The sources do not describe the exact deployment conditions beyond the need for an authenticated account to store the payload. Installations on a version at or above 1.2.8 are not affected.
No product ranges from the sources yet.
1.2.81.2.8 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser executes the payload. This may lead to compromising the user's session. This issue has been fixed in version 1.2.8.
This page as .md · .json · in your agent: get_signal("CVE-2026-105987")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.