CVE-2026-19876

A reflected cross-site scripting (XSS) vulnerability exists in the login/SSO error page of INFINITT ULite version 5.0.2.1_BN48_20260528 and earlier. The flaw is caused by an unsanitized request parameter being reflected without proper output encoding. This allows an unauthenticated remote attacke...