ICT Innovations

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ICT Innovations records in CISA KEV

No ICT Innovations vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-02278 CVE-2025-2611 · GHSA-3h67-687r-7fpc

ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

MEDIUM 57

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.08378 Published 2025-08-05 No fix listed CWE-78

TI-2026-82319 CVE-2026-7190 · GHSA-874x-f28p-552g

Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration

LOW 23

A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00335 Published 2026-10-29 Fixed in March 2026 CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0