CVE-2026-82788

MediumCVSS 6.1

Published: 14/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Summary

A cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Risk Assessment

An attacker could execute arbitrary script in a logged-in user's browser, potentially leading to session or data theft. This may compromise confidentiality and integrity.

Recommendation

Update CPSL-08P1EN device software to a version containing the XSS fix. Restrict access to the web interface and apply the principle of least privilege.

Other vulnerabilities in CPSL-08P1EN

CVE-2026-82787Critical
A missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication.

Original NVD description (English source)

Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.