CVE-2026-30695

CVE-2026-30695 - Zucchetti Axess의 XSS 취약점 요약 Zucchetti Axess 출입통제 장치XA4, X3/X3BIO, X4, X7, XIO, i-door, i-door+의 웹 기반 설정 인터페이스에 XSS교차 사이트 스크립팅 취약점이 존재합니다. 이 취약점은 /filemanager.cgi 엔드포인트의 dirBrowse 매개변수에서 사용자 입력값에 대한 부적절한 삭제샌니타이제이션로 인해 발생합니다. 인증된 공격자는 관리 사용자의 컨텍스트에서 실행되는 임의의 JavaScript 코드를 주입할 수...

CVE-2026-30695

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...

CVE-2026-30695

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...

CVE-2026-30695

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...

CVE-2026-30695

The CVE-2026-30695 entry concerns a Cross-Site Scripting (XSS) vulnerability in the web-based configuration interface of Zucchetti Axess access control devices (models XA4, X3/X3BIO, X4, X7, XIO / i-door / i-door+). The issue is caused by improper sanitization of user-supplied input in the dirBro...

PT-2026-26088

A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter o...