PT-2026-29029 · Unknown · Ingestate Server

Cr0Wld3R · Publicado 2026-03-30 · Atualizado 2026-03-30 · CVE-2026-30082

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IngEstate Server version 11.14.0

Description The software contains multiple stored cross-site scripting (XSS) issues within the Edit feature of the Software Package List page. These issues allow attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the About application, What's news, or Release note parameters.

Recommendations Apply input validation and sanitization to the About application, What's news, and Release note parameters in the Edit feature of the Software Package List page.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30082

Produtos afetados

Ingestate Server

Referências · 4

• 🔥 https://github.com/Cr0wld3r/CVE-2026-30082 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30082 · Nota de Segurança
• http://ingestate.com · Nota
• https://ingenico.com · Nota