Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-11747 EUVD-2026-67134GHSA-5qh6-895j-vpwx

Reflected XSS in Seres Software's syWEB

Published Aug 27, 2026 · Updated Aug 27, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Seres Software syWEB allows Reflected XSS.

This issue affects syWEB: through 27082026.
NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
Seres Software syWEB ≤ 27082026 —

References