Cross-Site Scripting Vulnerability in Ankaref LIBRID/LIBREF

CVE-2026-12682

What is CVE-2026-12682?

Ankaref Innovation and Technology Inc. has reported a vulnerability in the LIBRID/LIBREF software, specifically a cross-site scripting flaw. This flaw allows attackers to inject malicious scripts into web pages that are viewed by users, potentially compromising user data and session information. The vulnerability exists in various versions of the software, including versions ranging from 2.01.0.2183 to 10092026. It's important for users and administrators of these products to implement immediate security measures and monitor for any suspicious activity.

References