PT-2025-52681

CVE-2024-27708

·

Published

2025-12-22

·

Updated

2026-09-26

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MyNET versions 26.06 and earlier
Description An iframe injection issue exists that allows a remote attacker to execute arbitrary code. The issue is related to the src parameter.
Recommendations Versions prior to 26.06 should be updated.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')
Related identifiers
CVE-2024-27708
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com