CVE-2026-12812

Summary

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

VendorProductVersion RangeStatus
RadwareCyber Controller10.0affected
RadwareCyber Controller10.1affected
RadwareCyber Controller10.2affected
RadwareCyber Controller10.3affected
RadwareCyber Controller10.4affected
RadwareCyber Controller10.5affected
RadwareCyber Controller10.6affected
RadwareCyber Controller10.7affected
RadwareCyber Controller10.8affected
RadwareCyber Controller10.9affected
RadwareCyber Controller10.10affected
RadwareCyber Controller10.11.0affected

Weaknesses

  • CWE-80: Basic Cross Site Scripting
  • CWE-74: Injection

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References