EUVD-2026-118002

INFINITT ULite 5.0.2.1BN4820260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared...

CVE-2026-19877

The INFINITT ULite software (versions 5.0.2.1_BN48_20260528 and earlier) is vulnerable to a brute-force attack on image-share link passwords. The root cause is the use of low-entropy passwords combined with a lack of restrictions on repeated authentication attempts. An unauthenticated remote atta...

CVE-2026-19876

A reflected cross-site scripting (XSS) vulnerability exists in the login/SSO error page of INFINITT ULite version 5.0.2.1_BN48_20260528 and earlier. The flaw is caused by an unsanitized request parameter being reflected without proper output encoding. This allows an unauthenticated remote attacke...

EUVD-2026-118001

A reflected cross-site scripting XSS vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1BN4820260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who opens a crafted link. An unsanitized request parameter is...