PT-2026-34540 · Google+1 · Angularjs+1

Jean-Marie Bourbon + 1 · Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-41468

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Beghelli Sicuro24 SicuroWeb (affected versions not specified)

Description The software embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives. When combined with template injection within the application, these primitives allow attackers to escape the AngularJS sandbox and execute arbitrary JavaScript in operator browser sessions. This can lead to session hijacking, DOM manipulation, and persistent browser compromise. In plaintext HTTP deployments, network-adjacent attackers can deliver the injection and escape chain via a Man-in-the-Middle (MITM) attack without active user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1104

Related Identifiers

CVE-2026-41468

Affected Products

Angularjs

Sicuro24 Sicuroweb

References · 8

• 🔥 https://github.com/kmkz/Exploits/blob/master/2026/CVE-2026-22191-SicuroWeb-ATI-chain.txt · Exploit
• 🔥 https://github.com/kmkz/Exploits/blob/master/2026/CVE-2026-22191-POC.py · Exploit
• 🔥 https://boffsec-services.com/posts/sicuroweb-cve-2026-22191 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41468 · Security Note
• https://twitter.com/infoflowcloud/status/2047362060103643468 · Twitter Post
• https://beghelli.it · Note
• https://twitter.com/CVEnew/status/2047359971692511695 · Twitter Post
• https://vulncheck.com/advisories/beghelli-sicuro24-sicuroweb-angularjs-sandbox-escape-via-template-injection · Note