Live › vulnerability › CVE-2026-113808
Go to dashboardThe SNS enrollment Portal has a stored cross-site scripting flaw reachable through its captive portal when a user is created. The injected script runs in the browser of an administrator who validates the request, so an attacker can act with admin rights.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.
Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
This page as .md · .json · in your agent: get_signal("CVE-2026-113808")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.