1. Home
  2. CVE Database
  3. CVE-2026-26724
HIGH · 7.6

CVE-2026-26724

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the...

Vulnerability Description

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
KeystorageGlobal Facilities Management Software20230721a

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2026-26724?

CVE-2026-26724 is a vulnerability with a CVSS score of 7.6 (HIGH). Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the...

How severe is CVE-2026-26724?

CVE-2026-26724 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-26724?

Check the references section above for vendor advisories and patch information. Affected products include: Keystorage Global Facilities Management Software.