CVE-2026-8306

MediumCVSS 6.1

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

A stored Cross-Site Scripting (XSS) vulnerability exists in Armiya Information Technologies Ltd. Co. Access Control System (GKS) before version 2. The flaw is caused by improper neutralization of input during web page generation.

Risk Assessment

An attacker can inject a malicious script that executes in the browsers of other users, potentially leading to session hijacking, account takeover, or data leakage.

Recommendation

Immediately upgrade the Access Control System (GKS) to version 2 or later, which contains the fix for this vulnerability.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Stored XSS. This issue affects Access Control System (GKS): before Version 2.