CVE-2026-1769CWE-79

Stored XSS on Xerox CentreWare Web 7.0.6

Medium · published February 6, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6.

Consider

upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-06T17:19Z
EPSS history
Timeline
  • 06 FEB 17:19Z
    Stored XSS on Xerox CentreWare Web 7.0.6
    cvelistv5