Live › vulnerability › CVE-2026-111088
Go to dashboardThe SNS VPN log monitoring screen fails to sanitize stored data before displaying it, so script injected into a log entry runs in the browser of whoever views the screen. An attacker can use this to act as a logged-in administrator in the VPN management interface.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.
This page as .md · .json · in your agent: get_signal("CVE-2026-111088")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.