Cross-Site Scripting Vulnerability in Xerox CentreWare Software
CVE-2026-1769

5.3MEDIUM

Key Information:

Vendor

Xerox
Status
Centreware
Vendor
CVE Published:
6 February 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-1769?

This vulnerability enables stored cross-site scripting (XSS) attacks in Xerox CentreWare, allowing malicious users to inject and execute harmful scripts on the web interface. It affects versions of CentreWare up to 7.0.6 and can compromise the security of users accessing the platform. For improved security, it is recommended to upgrade to Xerox CentreWare Web version 7.2.2.25, which addresses this vulnerability. Detailed information can be found in the official security bulletin.

Affected Version(s)

CentreWare Windows 0 <= 7.0.6

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-1769-WriteUp
Created by Leox48

References

https://securitydocs.business.xerox.com/wp-content/upload...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.