CVE-2026-0518

XSS in Secure Access Consoles prior to 14.20

Medium · published January 17, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

CVE-2026-0518 is a cross-site scripting vulnerability in versions of

Secure Access prior to 14.20. An attacker with administrative privileges

can interfere with another administrator’s use of the console.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00173 · 6.5th percentile
Published
2026-01-17T01:09Z
EPSS history
Timeline
  • 17 JAN 01:09Z
    XSS in Secure Access Consoles prior to 14.20
    cvelistv5