PT-2026-51259 · Radware · Cyber Controller

Published 2026-06-21 · Updated 2026-06-21 · CVE-2026-12812

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Radware Cyber Controller versions prior to 10.11.0

Description An issue exists within the HTML Report Generation component that allows for HTML injection. This flaw can be exploited remotely to inject malicious HTML code into reports.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Special Elements Injection

Weakness Enumeration

CWE-80

CWE-74

Related Identifiers

CVE-2026-12812

Affected Products

Cyber Controller

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-12812 · Security Note
• https://vuldb.com/submit/837203 · Note
• https://twitter.com/infoflowcloud/status/2068834048684744783 · Twitter Post
• https://vuldb.com/cve/CVE-2026-12812 · Note
• https://vuldb.com/vuln/372606/cti · Note
• https://vuldb.com/vuln/372606 · Note
• https://twitter.com/CVEnew/status/2068833204329390170 · Twitter Post