Veille CVE

Vendredi 9 octobre 2026

3 CVE

  1. CVE-2026-105275 4.3 Moyenne

    Satel Netco Design

    Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files exist on the host system.

  2. CVE-2026-105269 6.8 Moyenne

    Satel Netco Design

    Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another user's browser when the affected content is viewed.

  3. CVE-2026-104628 6.5 Moyenne

    Satel Netco Design

    Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted search input that causes excessive processing, potentially degrading the availability of the application.