CVE-2026-97358
Received Received - Intake

Web Functionality Inclusion Leads to RCE in SpaceCom

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: B. Braun SE

Description
An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-97358
EUVD
EUVD-2026-125685

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-830 The product includes web functionality (such as a web widget) from another domain, which causes it to operate within the domain of the product, potentially granting total access and control of the product to the untrusted source.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves including web functionality from an untrusted source, which could allow remote code execution on SpaceCom. This means an attacker might exploit this to run malicious code on the affected system.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized remote code execution on SpaceCom, potentially compromising system integrity, data confidentiality, or availability. Attackers might gain control over the system or steal sensitive information.

Mitigation Strategies

Immediately review and remove any untrusted web functionality sources that may be included in SpaceCom. Ensure all web components are from verified and trusted origins to prevent remote code execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97358. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...