CVE-2026-82795: Medium severity SolarView Compact vulnerability
Published Sep 14, 2026
·Updated
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Affected Software
1 affected component
SolarView Compact
Event History
Sep 14, 2026
CVE Published
via MITRE·06:46 AM
Data Sourced
via MITRE·06:46 AM
DescriptionSeverity
Frequently Asked Questions
1
Can an unauthenticated attacker exploit this issue?
No. The available information states that an attacker must be able to log in to SolarView Compact.
2
Which product functions should be prioritized during triage?
Prioritize the Schedule Settings and Mail Send Setting functions, which are identified as affected areas.
3
Does exploitation require interaction from another user?
The CVSS vector indicates that user interaction is required. The available information does not specify the exact interaction needed.
4
What is the potential impact if exploitation succeeds?
An attacker may execute arbitrary OS commands. The reported impact also includes limited confidentiality and integrity effects, with no availability impact indicated.