Reflected XSS Vulnerability in iTop IT Service Management Tool by Combodo

CVE-2026-30864

What is CVE-2026-30864?

Combodo iTop is a web-based IT service management solution that has a vulnerability in its dashboard revert functionality, allowing reflected cross-site scripting (XSS) attacks. This flaw could enable an attacker to inject malicious scripts into the web application, impacting user sessions and potentially compromising sensitive user data. The vulnerability was addressed in version 3.2.3, emphasizing the importance of updating to maintain security.

References