SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-12683

MEDIUM · CVSS 5.4 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

An improper neutralization of input during web page generation in Ankaref Innovation and Technology Inc.'s LIBRID/LIBREF products allows for stored cross-site scripting (XSS) vulnerabilities, impacting versions from 2.01.0.2183 to 10092026. This vulnerability could enable attackers to inject malicious scripts into web pages viewed by users, potentially leading to data theft or session hijacking. Organizations using these affected versions should prioritize remediation efforts to mitigate the risk of exploitation.

CVE
CVE-2026-12683
Severity
MEDIUM
CVSS
5.4
EPSS
0.16%

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.