EUVD-2026-12870

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...

CVE-2026-30695

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...

Zucchetti Axess 安全漏洞

Zucchetti Axess is a series of personnel access management systems developed by the Italian company Zucchetti. There is a security vulnerability in Zucchetti Axess, which stems from improper handling of user input for the dirBrowse parameter in the web configuration interface for the...