CVE-2026-7380

MediumCVSS 6.1

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

An XSS vulnerability in Armiya's Access Control System (GKS) allows an attacker to inject malicious scripts via HTML attributes. The issue affects versions prior to 2.0.

Risk Assessment

An attacker could exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions within the victim's browser context.

Recommendation

Immediately update the Access Control System (GKS) to version 2.0 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows XSS Targeting HTML Attributes. This issue affects Access Control System (GKS): before Version 2.