Cross Site Scripting Vulnerability in Advantech WebAccess/SCADA
CVE-2026-36226

6.1MEDIUM

Key Information:

Vendor

Advantech
Status
WebAccess/SCADA
Vendor
CVE Published:
22 May 2026

What is CVE-2026-36226?

A Cross Site Scripting vulnerability exists in Advantech WebAccess/SCADA 8.0-2015.08.16, enabling remote attackers to exploit the Create New Project User component. By inserting crafted script code into the decryption field, attackers may gain unauthorized access to sensitive user information, posing significant data security risks for the affected systems.

References

https://github.com/NullByte8080/CVE-2026-36226

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.