CVE-2026-6059

MediumCVSS 4.8

Published: 25/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.

Risk Assessment

The risk involves the possibility of executing malicious scripts in the administrator's browser, which could lead to session hijacking or theft of configuration data.

Recommendation

It is recommended to restrict access to the management interface to trusted networks only and apply security patches from the vendor.

Other vulnerabilities in Aterm

CVE-2026-8652High
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product's web console, they may be able to execute arbitrary OS commands via adjacent network.

Original NVD description (English source)

A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.