Alertus Desktop Alert 5.4.98.0 Remote HTML Injection

Alertus Desktop Alert version 5.4.98.0 contains an unauthenticated remote HTML injection vulnerability due to certificate validation bypass. The proof of concept serves forged attacker-signed alert responses that inject HTML into the client and includes a browser protocol-handler demonstration...

Exploit for CVE-2026-38903

CVE-2026-38903 Alertus Desktop Alert: Unauthenticated Remo...