CVE-2026-113383

A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument tz results in cross site scripting. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

An attacker can execute malicious script in a user's browser, potentially leading to session or credential theft. The vendor's lack of response means no official fix is available.

Implement input validation and encoding for the tz parameter and consider WAF rules to block XSS attempts. Monitor logs for suspicious requests.