PT-2026-22330 · Unknown · Omega-Psir

Łukasz Rybak · CVE-2026-1434 · Published 2026-02-27 · Updated 2026-02-27

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Omega-PSIR versions prior to 4.6.7

Description Omega-PSIR is susceptible to a Reflected Cross-Site Scripting (XSS) issue. An attacker can create a malicious URL utilizing the lang parameter. When a user opens this URL, it can lead to the execution of arbitrary JavaScript code within the user's browser. The vulnerable parameter is lang. The affected API endpoint is not specified.

Recommendations Update Omega-PSIR to version 4.6.7 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-1434

Affected Products

Omega-Psir

References · 8

• https://osv.dev/vulnerability/CVE-2026-1434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1434 · Security Note
• https://t.me/cveNotify/153454 · Telegram Post
• https://omegapsir.io · Note
• https://twitter.com/VulmonFeeds/status/2027390233109483695 · Twitter Post
• https://t.me/CVEtracker/45972 · Telegram Post
• https://twitter.com/CVEnew/status/2027380160643649640 · Twitter Post
• https://cert.pl/posts/2026/02/CVE-2026-1434 · Note