CVE-2026-9292

Name of the Vulnerable Software and Affected Versions FactoryTalk DataMosaix Private Cloud (affected versions not specified)

Description Stored Cross-Site Scripting occurs due to improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are permanently stored on the server. This allows for the execution of arbitrary JavaScript when other users access the affected page, which may lead to account takeover, credential theft, or redirection to a malicious website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.