CVE-2026-5754
Received
Received - Intake
Reflected XSS in Radware Alteon vADC Enables Script Injection
Publication date: 2026-04-14
Last updated on: 2026-04-21
Assigner: CERT/CC
Description
Description
Reflected Cross-Site Scripting (XSS) Vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized actions, data theft, or other malicious activities.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| radware | alteon | 34.5.4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |