CVE-2026-127120

A cross-site scripting (XSS) vulnerability exists in Governikus AusweisApp Mobile up to version 2.5.5 . The flaw resides in an unknown function within the StartPAOSResponse Handler component, where an attacker can remotely initiate an attack by manipulating the ResultMessage argument. To remediat...