CVE-2026-11747
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Seres Software syWEB has a Reflected XSS vulnerability due to improper input neutralization during web page generation. This affects syWEB through 27082026. The vendor was contacted and it was learned that the product is not supported.
Risk Assessment
An attacker can inject malicious scripts that execute in the victim's browser, potentially leading to data theft or session hijacking.
Recommendation
Since the product is unsupported, consider migrating to a supported solution or apply security measures such as input filtering and output encoding.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported.