https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:29:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-78414 <p><strong>Affected:</strong> Network Optix Nx Witness VMS</p> <p>Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator&#39;s session token, resulting in Administrator Account Takeover. An attacker who controls an Nx server on the same network segment can set that server&#39;s site name to a script payload, which executes when an administrator opens the &#34;Merge with Another Site&#34; dialog and the site selection list is displayed.Solution:</p> <p>Update to Nx Witness VMS version 6.1.3 or later.</p> <p><strong>Affected:</strong> Network Optix Nx Witness VMS</p> <p>Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator&#39;s session token, resulting in Administrator Account Takeover. An attacker who controls an Nx server on the same network segment can set that server&#39;s site name to a script payload, which executes when an administrator opens the &#34;Merge with Another Site&#34; dialog and the site selection list is displayed.Solution:</p> <p>Update to Nx Witness VMS version 6.1.3 or later.</p> https://cve.radiocsirt.org/vuln/cve-2026-78414