CVE-2026-9144
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Stored XSS vulnerability in Taiko AG1000-01A SMS Alert Gateway. An authenticated attacker can inject persistent JavaScript by fragmenting malicious payloads across admin form fields, bypassing length restrictions.
Risk Assessment
An attacker can execute arbitrary JavaScript in an admin session, potentially leading to session theft, configuration changes, or further attacks.
Recommendation
Update the gateway firmware to the latest version. Restrict access to the admin panel to trusted IP addresses only.
Other vulnerabilities in Taiko AG1000-01A
See all- CVE-2026-9141Critical
The Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface. Unauthenticated attackers can access internal application pages such as index.zhtml, point.zhtml, and log.shtml without any session management or server-side authentication, enabling full administrative read and write access.
- CVE-2026-9139Critical
The Taiko AG1000-01A SMS Alert Gateway versions Rev 7.3 and Rev 8 contain hard-coded credentials in the web interface. Authentication is implemented entirely in client-side JavaScript, allowing credentials to be read from the page source.
Original NVD description (English source)
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedded web configuration interface that allows authenticated attackers to execute persistent JavaScript by fragmenting malicious payloads across multiple administrative form fields. Attackers can bypass front-end length restrictions using JavaScript comments and template literals to concatenate executable script fragments that are rendered in administrative dashboard views such as index.zhtml, resulting in persistent script execution within administrative sessions.