CVE Feed

    Dashboard / CVE / CVE-2022-26961

    CVE-2022-26961

    Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.

    Published:Sep 4, 2026
    Last Modified:Sep 10, 2026
    EPS:Sep 4, 2026
    EPSS Score:0.0014
    CVSS Score:5.4

    Affected Products

    Vendor
    Italtel
    Product
    Netmatch-s

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High