SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-57704

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Smart Manager versions up to 8.90.0, allowing attackers to inject malicious scripts that can execute in the context of a user's browser. This could lead to session hijacking, data theft, or other malicious actions affecting users of the application. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.

CVE
CVE-2026-57704
Severity
HIGH
CVSS
7.1
EPSS
0.18%

Original NVD Description

Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.