CVE-2026-70382
Received Received - Intake

Stored Cross-Site Scripting in Web Interface

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: ENISA

Description
Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values could cause script execution in the browser of a user who views an affected page. Exploitation requires an attacker to influence a stored value and a user to view a page that renders it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-70382
EUVD
EUVD-2026-110312

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves externally supplied values stored by the device being rendered in the web interface without proper output encoding. An attacker could manipulate these values to execute malicious scripts in the browser of a user viewing an affected page. Exploitation requires both influencing a stored value and a user viewing the page that displays it.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious scripts in your browser when you view a page that renders the affected stored value. This could lead to unauthorized actions, data theft, or session hijacking on your device.

Mitigation Strategies

Apply vendor patches or updates for affected WolfVision Cynap products as soon as they become available. Review and restrict user permissions to minimize the ability to influence stored values. Monitor web interface pages for unexpected script execution or unusual content rendering.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70382. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart