CVE-2026-5782

5.2 Moyenne

Publiée le 02/10/2026 à 17:17 · Modifiée le 05/10/2026 à 15:16 · Analyse NVD reportée · Source : iletisim@usom.gov.tr

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS. This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not supported.

Traduire en français

Produits concernés

MRV Technology Foreign Trade Ltd. Co. TurkHotspot

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.2 Moyenne	iletisim@usom.gov.tr	`CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1245

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories