Vendors / Airc Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Airc records in CISA KEV No Airc vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 68
MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00239 · Published 2025-12-24 · No fix listed CWE-89
Priority MEDIUM 60
A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00266 · Published 2025-12-24 · No fix listed CWE-79
Priority MEDIUM 60
MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00225 · Published 2025-12-24 · No fix listed CWE-79
Priority MEDIUM 60
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00225 · Published 2025-12-22 · No fix listed CWE-79
Priority MEDIUM 60
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00225 · Published 2025-12-22 · No fix listed CWE-79
Priority MEDIUM 53
MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00306 · Published 2025-12-22 · No fix listed CWE-79
Priority MEDIUM 44
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00614 · Published 2025-12-22 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 0 6 0 0
THREATIST.IORead the docs