CVE-2026-7380
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An XSS vulnerability in Armiya's Access Control System (GKS) allows an attacker to inject malicious scripts via HTML attributes. The issue affects versions prior to 2.0.
Risk Assessment
An attacker could exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions within the victim's browser context.
Recommendation
Immediately update the Access Control System (GKS) to version 2.0 or later, which includes a fix for this vulnerability.
Other vulnerabilities in Armiya Access Control System (GKS)
See all- CVE-2026-8309Medium
A reflected XSS vulnerability was found in the Access Control System (GKS) by Armiya Information Technologies Ltd. Co. before version 2. The flaw is due to improper input neutralization during web page generation.
- CVE-2026-8306Medium
A stored Cross-Site Scripting (XSS) vulnerability exists in Armiya Information Technologies Ltd. Co. Access Control System (GKS) before version 2. The flaw is caused by improper neutralization of input during web page generation.
Original NVD description (English source)
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows XSS Targeting HTML Attributes. This issue affects Access Control System (GKS): before Version 2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS