CVE-2026-19472

HighCVSS 8.7

Published: 01/09/2026(UTC)Updated: 01/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability.

Risk Assessment

An attacker can cause web server unavailability, potentially disrupting operations and preventing access to critical functions.

Recommendation

Apply patches or updates provided by the vendor. Restrict access to the embedded web server to trusted networks only.

Other vulnerabilities in ArmorStart LT

CVE-2026-19471Medium
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS