PT-2026-22330 · Unknown · Omega-Psir

Łukasz Rybak · Publicado 2026-02-27 · Atualizado 2026-02-27 · CVE-2026-1434

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Omega-PSIR versions prior to 4.6.7

Description Omega-PSIR is susceptible to a Reflected Cross-Site Scripting (XSS) issue. An attacker can create a malicious URL utilizing the lang parameter. When a user opens this URL, it can lead to the execution of arbitrary JavaScript code within the user's browser. The vulnerable parameter is lang. The affected API endpoint is not specified.

Recommendations Update Omega-PSIR to version 4.6.7 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-1434

Produtos afetados

Omega-Psir

Referências · 8

• https://t.me/cveNotify/153454 · Publicação no Telegram
• https://omegapsir.io · Nota
• https://osv.dev/vulnerability/CVE-2026-1434 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2027390233109483695 · Publicação no Twitter
• https://t.me/CVEtracker/45972 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027380160643649640 · Publicação no Twitter
• https://cert.pl/posts/2026/02/CVE-2026-1434 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1434 · Nota de Segurança