Stored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-613.
Summary
A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScript content into the fields containing their personal data. The content entered is stored and displayed without being properly sanitised when another user, including administrative staff, views the affected profile. Successful exploitation could allow JavaScript code to be executed in the victim’s browser, access to information available within the session, or the performance of actions using the victim’s permissions.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-92976
- 2026-10-03 Alias added: GHSA-f95c-wf66-hq9m
References
More T-Systems vulnerabilities
- TI-2026-01130 SQL injection (SQLi) on the Buroweb platform CVSS 4.0CRITICAL 9.3
- TI-2026-06306 Unauthorized access to files in T-Systems products CVSS 4.0MEDIUM 6.0
Sources
- CVE-2026-92976 · CVE Program
- CVE-2026-92976 · NVD
- FIRST EPSS
- GHSA-f95c-wf66-hq9m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences