PT-2026-47731 · Skilja Gmbh · Vinna Process Monitor

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-41031

Mitre

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-41031

Affected Products

Vinna Process Monitor

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-41031 · Security Note
• https://partner.skilja.com/uncategorized/security-advisory-stored-xss-in-vinna-process-monitor-cve-2026-41031 · Note