CVE-2026-119274: Input Validation
Published Nov 9, 2026
·Updated
Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS
Affected Software
1 affected component
Infoblox NIOS
Event History
Nov 9, 2026
CVE Published
via MITRE·01:19 PM
Data Sourced
via MITRE·01:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack requires high privileges in NIOS. The attack vector is network-accessible and has low attack complexity.
2
Does exploitation require another user to take action?
Yes. User interaction is required, consistent with a stored XSS payload being rendered when another user accesses the affected Global Smart Folders content.
3
What is the expected security impact?
The reported impact is low confidentiality and low integrity impact, with no availability impact. The vulnerability is rated medium severity with a CVSS score of 4.8.