Cross-Site Scripting reflejado en la configuración de PHP-CGI/PHP-FPM de ICT Innovations

Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration Thu, 10/29/2026 - 09:38 Aviso Affected Resources Insecure runtime configuration in PHP-CGI/PHP-FPM. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting the PHP-CGI/PHP-FPM configuration of ICT Innovations, a web-based multi-user package. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code, CVSS v4.0…

Číst originál na INCIBE-CERT →

CZ · EN/orig

ICT Innovations ES

tg: zranitelnost

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-7190	5.1 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 5.1.