CVE-2026-10057

MediumCVSS 4.8

Published: 29/05/2026(UTC)Updated: 21/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

The ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.

Risk Assessment

The risk includes session theft, data exfiltration, or unauthorized actions in the victim's context, potentially compromising the SCADA system's integrity.

Recommendation

Immediately update the ITS Intelligent SCADA System to a version that fixes the XSS vulnerability, and implement input validation and output encoding.

Other vulnerabilities in ITS Intelligent SCADA System

CVE-2026-10058Medium
The ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.

Original NVD description (English source)

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS