CVE-2026-52232

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-31 · updated 2026-09-09
Weakness: CWE-79

Description

A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.

References

https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2026-52232
https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2026-52232

Get alerted when CVE-2026-52232 or the next vulnerability affects your stack