PT-2026-22128 · Unknown · Vwebserver

Publicado 2026-02-26 · Atualizado 2026-03-12 · CVE-2026-1696

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Web Server (affected versions not specified)

Description The web server is not properly setting certain HTTP security headers in its responses to client applications. This could potentially expose the system to various attacks. Approximately 100,000 devices worldwide may be affected. The issue involves improper handling of HTTP security headers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-1696

Produtos afetados

Vwebserver

Referências · 8

• https://twitter.com/CVEnew/status/2027004189503602743 · Publicação no Twitter
• https://twitter.com/dailycve/status/2032167043835863250 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-1696 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2027042093944680596 · Publicação no Twitter
• https://t.me/CVEtracker/45836 · Publicação no Telegram
• https://t.me/cveNotify/155271 · Publicação no Telegram
• https://pcvue.com/security/#SB2026-2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-1696 · Nota de Segurança