PT-2026-26311 · Unknown · Opexus Ecase+1

Adam Rose · Publicado 2026-03-19 · Atualizado 2026-03-23 · CVE-2026-32869

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OPEXUS eComplaint and eCASE versions prior to 10.2.0.0

Description The software does not properly sanitize input for the "Name of Organization" field when creating case information. An authenticated attacker can inject a cross-site scripting (XSS) payload. This payload is executed when a victim views the case information page, potentially compromising their session.

Recommendations Update to version 10.2.0.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-32869

Produtos afetados

Opexus Ecase

Opexus Ecomplaint

Referências · 6

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-077-01.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32869 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-32869 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2034700778221232497 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2034676844377587768 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2036024199048028182 · Publicação no Twitter