CVE-2026-101158

Name of the Vulnerable Software and Affected Versions CloudVision (affected versions not specified)

Description Insufficient input validation in the Fileserver upload API endpoint allows an authenticated attacker with file upload privileges to perform stored cross-site scripting (XSS). This occurs when the application fails to properly sanitize user-supplied data before storing it, which can then be executed in the browser of another user. Successful exploitation could lead to the hijacking of a user's web session, potentially granting the attacker full account access and administrative permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.