Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-20894 EUVD-2026-2953GHSA-6h49-87rq-w9rr

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking adminis…

Published Jan 16, 2026 · Updated Jan 16, 2026 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesses the setting screen.

Affected products

VendorProductAffectedFixed
TOA Multiple Network Cameras TRIFORA 3 series see the information provided by the vendor —

References