EIP-2026-106318
PRE-CVECyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106318. PoCs published by Patrick Webster.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Cyberoam UTM by injecting a malicious script into the 'srcip' parameter of a specific JSP page. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other client-side attacks.
Description
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Cyberoam UTM by injecting a malicious script into the 'srcip' parameter of a specific JSP page. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other client-side attacks.