MajorCritical vulnerability

CVE-2026-105269 (CVSS 8.5)

NVD · officialPublished Oct 8, 2026Risk 37/100

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another user's browser when the affected content is viewed.

Technical details

CVSS

8.5

AV:NetworkAC:LowPR:HighUI:Passive

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source