CVE-2022-26961
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Italtel NetMatch-S 5.0.0-20200703 在 和 中存在多个存储型 XSS 漏洞，通过 参数触发。利用该漏洞的恶意用户可以注入任意 JavaScript。恶意载荷将在每次已认证用户浏览包含该载荷的页面时被触发。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-26961
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2022-26961
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-26961
请登录查看更多情报信息。
Vendor Pages for CVE-2022-26961 (1)
Same Patch Batch · n/a · 2026-09-04 · 43 CVEs total
| CVE-2026-75430 | 9.8 CRITICAL | PowerJob Worker 5.1.2 远程代码执行漏洞 |
| CVE-2026-75431 | 9.1 CRITICAL | PowerJob Server 5.1.2 JWT密钥可预测致远程代码执行 |
| CVE-2026-85401 | 6.3 MEDIUM | Dolibarr Legacy File Manager config.inc.php access control |
| CVE-2026-79389 | Trueview T18161 S 6.0.23.4 MQTT消息验证漏洞 | |
| CVE-2026-31020 | DocsGPT 0.15.0 服务端模板注入致RCE漏洞 | |
| CVE-2026-79390 | TI8161 6.0.23.4 明文MQTT信息泄露漏洞 | |
| CVE-2026-79391 | Trueview 6.0.23.4 MQTT服务未认证漏洞 | |
| CVE-2026-50894 | easyadmin v2.0.2.2 任意文件上传漏洞 | |
| CVE-2026-79426 | CRMEB 6.0.0 任意文件删除漏洞 | |
| CVE-2026-79423 | SeaCMS v13.6管理配置组件RCE漏洞 | |
| CVE-2025-67066 | oasys sysoa 1.0 /outaddresspaging SQL注入 | |
| CVE-2026-75438 | Open5GS v2.7.7缓冲区溢出致服务拒绝 | |
| CVE-2026-71626 | Invoice Ninja v5.13.24 远程敏感信息泄露漏洞 | |
| CVE-2026-71624 | esoTalk 1.0.0g4 远程代码执行 | |
| CVE-2026-71622 | Zhao-github APiAdmin 5.0.1 User.php 组件 SQL注入漏洞 | |
| CVE-2026-78839 | MachForm v30任意文件上传导致代码执行 | |
| CVE-2026-71620 | ApiAdmin 5.0.1 文件上传导致远程代码执行 | |
| CVE-2021-44319 | Parrot AR.Drone 1/2 无线认证拒绝服务漏洞 | |
| CVE-2021-44320 | Parrot AR.Drone 1/2 存在DoS漏洞 | |
| CVE-2026-38961 | pfSense 26.03等RSS组件XSS漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-26961
No comments yet