CVE-2026-82795
MediumCVSS 5.4Summary
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Risk Assessment
An attacker with valid credentials could execute arbitrary OS commands, potentially leading to full device compromise. This may result in loss of confidentiality, integrity, and availability.
Recommendation
Update SolarView Compact software to a version containing the XSS fix. Restrict access to the management interface and change default passwords.
Other vulnerabilities in SolarView Compact
See all- CVE-2026-82796Medium
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82794High
SolarView Compact contains an OS command injection vulnerability in Schedule Settings. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.