Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-59661 EUVD-2026-91383GHSA-j284-gm2q-8w7h

Multiple vulnerabilities in the Repasat application

Published Oct 2, 2026 · Updated Oct 6, 2026 · Assigned by INCIBE

Description

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”.

Affected products

VendorProductAffectedFixed
Repasat Repasat application < Abril patch "20260402" Abril patch "20260402"

References