A vulnerability has been found in Eleveo Quality Management 9.7.0 and classified as problematic. This vulnerability affects unknown code of the component Conversation Review. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-85406. Remote exploitation of the attack is possible. Furthermore, an exploit is... Weiterlesen: CVE-2026-85406 | Eleveo Quality Management 9.7.0 Conversation Review …
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-85406 | Eleveo Quality Management 9.7.0 Conversation Review cross site scripting
A vulnerability has been found in Eleveo Quality Management 9.7.0 and classified as problematic. This vulnerability affects unknown code of the component…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-85406
Exploitation: poc (PoC verfügbar)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-09-08T14:35:26.785879Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencevuldb.com
-
Web Referencevuldb.com
-
Web Referencevuldb.com
-
Web Referencevuldb.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar