CVE-2026-105269

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-09

Assigner: ICS-CERT

Description

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another user's browser when the affected content is viewed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-09

EPSS Evaluated

2026-10-18

NVD

CVE-2026-105269

EUVD

EUVD-2026-95335

Affected Vendors & Products

Vendor	Product	Version / Range
Satel	Satel	Netco Design 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a stored cross-site scripting (XSS) issue in Satel Netco Design versions before v2.1.7. An authenticated user with Network Operator privileges can inject malicious scripts that are stored on the server. When other users view the affected content, the scripts execute in their browsers without proper neutralization.

Detection Guidance

This vulnerability requires manual inspection of the Satel Netco Design web interface. Check for stored user inputs that are rendered without proper sanitization, particularly in fields accessible to Network Operator users. Look for scripts or HTML tags in saved data that could execute when viewed by other users.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary scripts in the browsers of other users, potentially leading to session hijacking, data theft, or unauthorized actions on behalf of the victim. Users with Network Operator privileges are the primary risk for exploitation.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized script execution in user browsers. This may lead to data breaches, unauthorized access to sensitive information, or manipulation of user sessions, which are critical violations under both regulations.

Mitigation Strategies

Update Satel Netco Design to version 2.1.7 or later to address the stored cross site scripting vulnerability. Restrict Network Operator privileges to trusted users only.

Hi! I’m here to help you understand CVE-2026-105269. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70