{"id":"CVE-2026-19810","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-19810","generatedAt":"2026-10-28T03:30:40.893Z","title":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of…","description":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.","published":"2026-10-13T21:17:38.000Z","lastModified":"2026-10-16T19:56:00.000Z","status":"Awaiting Analysis","sourceIdentifier":"secure@symantec.com","cvss":{"version":"3.1","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":[],"epss":{"score":0.00172,"percentile":0.06527,"date":"2026-10-26","history":[{"date":"2026-10-14","score":0.00172,"percentile":0.06112}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-13T21:17:38.000Z","detail":{"score":"5.4","severity":"MEDIUM","publishedAt":"2026-10-13T21:17:37.943Z"},"summary":"New CVE, medium severity (CVSS 5.4)."}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38870","source":"secure@symantec.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-19810","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}