Vulnerabilities

TI-2026-00764 CVE-2026-1011 · GHSA-vrmv-j3x6-c7mm

Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint

LOW 27

A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00285 Published 2026-01-15 No fix listed CWE-116

TI-2026-00762 CVE-2026-1009 · GHSA-fc5v-qvgj-pv25

Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

MEDIUM 40

A stored cross-site scripting (XSS) vulnerability exists in the Altium Forum due to missing server-side input sanitization in forum post content.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00238 Published 2026-01-15 No fix listed CWE-284

TI-2026-00761 CVE-2026-1008 · GHSA-2vwg-39m6-fw44

Stored Cross-Site Scripting in Altium Live User Profile Fields

LOW 33

A stored cross-site scripting (XSS) vulnerability exists in the user profile text fields of Altium 365.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00237 Published 2026-01-15 No fix listed CWE-79

Vulnerabilities

Filters

Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint

Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

Stored Cross-Site Scripting in Altium Live User Profile Fields