Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-8309 EUVD-2026-42018GHSA-8g9p-mgr6-f26j

Reflected XSS in Armiya Technologies' Access Control System

Published Jul 7, 2026 · Updated Jul 7, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Reflected XSS.

This issue affects Access Control System (GKS): before Version 2.

Affected products

VendorProductAffectedFixed
Armiya Information Technologies Ltd. Co. Access Control System (GKS) < Version 2 Version 2

References