Live › vulnerability › CVE-2026-113383
Go to dashboardOptimalCloud 5.0 has a cross-site scripting flaw in the tz argument of the public Login page at /v5.0/webapps/pages/public/Login. An attacker who gets a user to open a crafted link can run script in that user's browser session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument tz results in cross site scripting. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-113383")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.