PT-2026-29029 · Unknown · Ingestate Server

Cr0Wld3R · Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-30082

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IngEstate Server version 11.14.0

Description The software contains multiple stored cross-site scripting (XSS) issues within the Edit feature of the Software Package List page. These issues allow attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the About application, What's news, or Release note parameters.

Recommendations Apply input validation and sanitization to the About application, What's news, and Release note parameters in the Edit feature of the Software Package List page.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-30082

Affected Products

Ingestate Server

References · 4

• 🔥 https://github.com/Cr0wld3r/CVE-2026-30082 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30082 · Security Note
• http://ingestate.com · Note
• https://ingenico.com · Note