Content Security Policy Bypass in Beghelli Sicuro24 SicuroWeb
CVE-2026-41469

5.1MEDIUM

Key Information:

Vendor: Beghelli
Status: Sicuroweb (sicuro24)
Vendor: CVE Published:; 22 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-41469?

The Beghelli Sicuro24 SicuroWeb application lacks a robust Content Security Policy (CSP), which exposes it to significant security risks. This failure allows attackers to load unauthorized external JavaScript resources, potentially leading to the execution of arbitrary remote payloads. When combined with existing vulnerabilities, such as template injection and sandbox escape issues, the absence of CSP can enable an attacker to compromise user sessions, escalating the risk of data theft and system manipulation.

Affected Version(s)

SicuroWeb (Sicuro24) 0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-41469 - Proof of Concept