CVE-2026-11747: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Seres Software syWEB allows Reflected XSS.

This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVSS Details

CVSS 3.1 Base Score: 6.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.