CVE-2026-101156

Summary

A stored XSS vulnerability allows authenticated administrators with high privileges to inject malicious scripts into configuration settings that execute in other users' browsers when they view or compare those configurations. This enables attackers to hijack user sessions and access sensitive data.

Exploitability

Exploitation requires an authenticated administrator with high privileges to store malicious content, making it moderately difficult but not highly complex to achieve.

Blast radius

If exploited, this vulnerability could allow attackers to impersonate administrators, access confidential network configurations, and potentially disrupt wireless services across the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published. Disable the affected configuration management feature or restrict access to the named endpoint until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.