[ CVE-2026-105323 · Published 27 Oct 2026 ]
Vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software
CVSS 6.1
EPSS <1%No fix listed yet
[ Description ]Official description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS. This issue affects Kulga News Software: from v26.7.4 before v26.10.0.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.