What’s Vulnerable › Vulnerabilities
CVE-2026-20894
- Severity: medium (CVSS 4.8 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-01-16 · updated 2026-06-17
- Weakness: CWE-79
Description
Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesses the setting screen.
Affected products
- TOA Corporation Multiple Network Cameras TRIFORA 3 series: see the information provided by the vendor
References
Get alerted when CVE-2026-20894 or the next vulnerability affects your stack