CVE-2026-50040

Name of the Vulnerable Software and Affected Versions Storage Concentrator (SC & SCVM) (affected versions not specified)

Description Reflected cross-site scripting occurs because unsanitized content is echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an authenticated user, executes arbitrary script content within the victim's browser session in the context of the application. This can be used to steal session cookies, redirect users, or perform unauthorized actions on behalf of the victim.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.