[ CVE-2026-87752 · Published 28 Sep 2026 ]

Vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis

CVSS 6.1 EPSS <1%No fix listed yet

[ Description ]Official description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.