CVE-2026-12682

An improper neutralization of input during web page generation in Ankaref Innovation and Technology Inc.'s LIBRID/LIBREF products allows for stored cross-site scripting (XSS) vulnerabilities, impacting versions from 2.01.0.2183 to 10092026. This could enable attackers to inject malicious scripts that execute in the context of users' browsers, potentially leading to data theft or session hijacking. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation, especially if they handle sensitive user data.