CVE-2026-29510: Improper Neutralization of Input During Web Page Generation

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

PT-2026-25782

Name of the Vulnerable Software and Affected Versions Hereta ETH-IMC408M firmware versions prior to 1.0.15 Description The software contains a stored cross-site scripting issue that allows authenticated attackers to inject arbitrary JavaScript. The attack vector involves manipulating the Device...