CVE-2026-104807

Published 5 October 2026 · tracked since 5 October 2026

Description

DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application.The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Dom

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-59783
• CVE-2026-105289 LOW 3.5
• CVE-2026-105290 HIGH 7.3
• CVE-2026-105291 MEDIUM 4.3
• CVE-2026-105287 MEDIUM 6.3
• CVE-2026-105288 MEDIUM 4.3
• CVE-2026-105263 MEDIUM 4.7
• CVE-2026-105253 HIGH 7.3
• CVE-2026-105254 MEDIUM 6.3
• CVE-2026-104400 MEDIUM 6.5

→ Open the live CVE board · all tools