CVE-2026-38903

CVE-2026-38903 Alertus Desktop Alert: Unauthenticated Remote HTML Injection via Certificate Validation Bypass Alertus Desktop Alert v5.4.98.0 for Windows accepts forged alert messages from the network and renders attacker controlled HTML with no user interaction. The client's PKI module never...