CVE-2026-82767
MediumCVSS 5.2Summary
A cross-site scripting vulnerability exists in SGA1000. If exploited, an arbitrary script may be executed in a logged-in user's web browser.
Risk Assessment
An attacker could hijack a logged-in user's session or perform unauthorized operations in the device interface. This may compromise configuration and data security.
Recommendation
Update the SGA1000 device firmware to a patched version and restrict web interface access to trusted networks.
Other vulnerabilities in SGA1000
See all- CVE-2026-82768High
A path traversal vulnerability exists in SGA1000. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.
- CVE-2026-82766High
An OS Command Injection issue exists in SGA1000 due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.