CVE-2026-6997

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function of the component New RMON History Page. The manipulation of the argument Owner leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-699707.0Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699715.5Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.CVE-2026-699736.5Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perfCVE-2026-699744.7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.CVE-2026-699767.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-699777.0Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.CVE-2026-699785.6Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.CVE-2026-699795.5Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.CVE-2026-69982.4A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown function of the component New RMON StatisticsCVE-2026-699825.9Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a netwCVE-2026-699847.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-699858.8Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-6997: Low severity, CVSS 2.4 | Vulnix