PT-2025-53296 · Mynet · Mynet

Published 2025-12-24 · Updated 2025-12-27 · CVE-2024-35322

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08

Description The software contains a reflected cross-site scripting (XSS) issue through the ficheiro parameter. This allows for potential malicious code execution within the application.

Recommendations Versions prior to 26.09 should be updated.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-35322

Affected Products

Mynet

References · 8

• 🔥 https://miguelsantareno.github.io/airc_exploit.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-35322 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35322 · Vendor Advisory
• https://twitter.com/CVEnew/status/2004868181081686073 · Twitter Post
• https://airc.pt/solucoes-servicos/solucoes?segment=MYN · Note
• https://t.me/cveNotify/146771 · Telegram Post
• https://t.me/CVEtracker/40609 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2003930991551717699 · Twitter Post