What’s Vulnerable › Vulnerabilities
CVE-2026-41031: A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor
- Severity: high (CVSS 8.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-09 · updated 2026-07-23
- Weakness: CWE-79
Description
A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.
Affected products
- Skilja GmbH Vinna Process Monitor: from 3.1.2 before 4.0.6 — fixed in 4.0.6
How to fix
Upgrade to a fixed version: Skilja GmbH Vinna Process Monitor 4.0.6. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-41031 or the next vulnerability affects your stack