CVE-2026-1011

{"id": "CVE-2026-1011", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1011", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-16T17:04:46.841715Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "4760f414-e1ae-4ff1-bdad-c7a9c3538b79", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "4760f414-e1ae-4ff1-bdad-c7a9c3538b79", "affectedData": [{"vendor": "Altium", "modules": ["Support case comment rendering (AddComment endpoint)"], "product": "Altium Live", "versions": [{"status": "affected", "changes": [{"at": "1.1.1.40", "status": "unaffected"}], "version": "0", "versionType": "semver", "lessThanOrEqual": "1.1.1.39"}], "platforms": ["Web"], "defaultStatus": "unaffected"}]}], "published": "2026-01-16T00:16:29.050", "references": [{"url": "https://www.altium.com/platform/security-compliance/security-advisories", "tags": ["Vendor Advisory"], "source": "4760f414-e1ae-4ff1-bdad-c7a9c3538b79"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "4760f414-e1ae-4ff1-bdad-c7a9c3538b79", "description": [{"lang": "en", "value": "CWE-79"}, {"lang": "en", "value": "CWE-116"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization. Although the client interface applies HTML escaping, the backend accepts and stores arbitrary HTML and JavaScript supplied via modified POST requests.\n\nThe injected content is rendered verbatim when support cases are viewed by other users, including support staff with elevated privileges, allowing execution of arbitrary JavaScript in the victim\u2019s browser context."}, {"lang": "es", "value": "Existe una vulnerabilidad de cross-site scripting (XSS) almacenado en el endpoint AddComment del Centro de Soporte de Altium debido a la falta de sanitizaci\u00f3n de entrada del lado del servidor. Aunque la interfaz del cliente aplica escape de HTML, el backend acepta y almacena HTML y JavaScript arbitrarios suministrados a trav\u00e9s de solicitudes POST modificadas.\n\nEl contenido inyectado se renderiza textualmente cuando otros usuarios ven los casos de soporte, incluido el personal de soporte con privilegios elevados, lo que permite la ejecuci\u00f3n de JavaScript arbitrario en el contexto del navegador de la v\u00edctima."}], "lastModified": "2026-06-17T10:14:52.423", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:altium:altium_live:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "079E28E9-A5B9-49AF-8D96-B56C46DB5231", "versionEndIncluding": "1.1.1.39"}], "operator": "OR"}]}], "sourceIdentifier": "4760f414-e1ae-4ff1-bdad-c7a9c3538b79"}