CVE-2026-15552
Received Received - Intake

Stored XSS in Ragic Enterprise Cloud Database

Publication date: 2026-07-13

Last updated on: 2026-07-13

Assigner: TWCERT/CC

Description
Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-13
Last Modified
2026-07-13
Generated
2026-07-13
AI Q&A
2026-07-13
EPSS Evaluated
N/A
NVD
CVE-2026-15552
EUVD
EUVD-2026-43270

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ragic enterprise_cloud_database From 2026-04-10 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-15552 is a Stored Cross-Site Scripting (XSS) vulnerability in the Ragic Enterprise Cloud Database. It allows unauthenticated remote attackers to inject persistent JavaScript code into specific pages.

This injected JavaScript code executes automatically in users' browsers when they load the affected pages, potentially compromising user interactions with the application.

Impact Analysis

This vulnerability can impact you by allowing attackers to execute malicious JavaScript code in your browser without authentication.

Such attacks can compromise the confidentiality and integrity of user sessions, potentially leading to unauthorized access to sensitive information or manipulation of user data.

Mitigation Strategies

For the cloud version of the Ragic Enterprise Cloud Database, no action is required.

For on-premises or privately hosted versions, you must update the software to a patch released on or after April 10, 2026.

Compliance Impact

The vulnerability impacts the confidentiality and integrity of user sessions by allowing unauthenticated remote attackers to inject persistent JavaScript code that executes in users' browsers.

Such impacts on confidentiality and integrity could potentially affect compliance with standards and regulations like GDPR and HIPAA, which require protection of user data and secure handling of personal information.

However, no specific information about direct compliance implications or regulatory violations is provided in the available resources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15552. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart