Cross-Site Scripting reflejado en la configuración de PHP-CGI/PHP-FPM de ICT Innovations
Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration Thu, 10/29/2026 - 09:38 Aviso Affected Resources Insecure runtime configuration in PHP-CGI/PHP-FPM. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting the PHP-CGI/PHP-FPM configuration of ICT Innovations, a web-based multi-user package. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code, CVSS v4.0…
EPSS 0.00 CVSS 5.1 CVE-2026-7190 ICT Innovations ES