CVE-2026-19876

A reflected cross-site scripting XSS vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1BN4820260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who opens a crafted link. An unsanitized request parameter is...