Skip to content
OpenAdvisories
Medium · 5.2 CVE-2026-5782 EUVD-2026-91649GHSA-wh3x-m72p-phqj

Reflected XSS in MRV Technology's TurkHotspot

Published Oct 2, 2026 · Updated Oct 5, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS.

This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
MRV Technology Foreign Trade Ltd. Co. TurkHotspot ≤ 2026-10-02 —

References