{"id":"CVE-2026-7000","state":"PUBLISHED","title":"Datacom DM4100 VLAN Page cross site scripting","description":"A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some unknown functionality of the component VLAN Page. Such manipulation of the argument VLAN Name leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-04-25T21:00:24.121Z","updatedAt":"2026-04-27T12:39:14.369Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Datacom DM4100"],"affected":[{"vendor":"Datacom","product":"DM4100","versions":[{"version":"1.3.6.1.4.1.3709","status":"affected"}],"modules":["VLAN Page"]}],"references":["https://vuldb.com/vuln/359559","https://vuldb.com/vuln/359559/cti","https://vuldb.com/submit/797281"],"weaknesses":["CWE-79","CWE-94"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/7xxx/CVE-2026-7000.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-7000","state":"PUBLISHED","datePublished":"2026-04-25T21:00:24.121Z","dateUpdated":"2026-04-27T12:39:14.369Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-04-24T20:10:15.934Z"},"containers":{"cna":{"title":"Datacom DM4100 VLAN Page cross site scripting","descriptions":[{"lang":"en","value":"A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some unknown functionality of the component VLAN Page. Such manipulation of the argument VLAN Name leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Datacom","product":"DM4100","versions":[{"version":"1.3.6.1.4.1.3709","status":"affected"}],"modules":["VLAN Page"]}],"references":[{"url":"https://vuldb.com/vuln/359559","name":"VDB-359559 | Datacom DM4100 VLAN Page cross site scripting","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/359559/cti","name":"VDB-359559 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/797281","name":"Submit #797281 | Datacom DM4100 1.3.6.1.4.1.3709.1.2.136 Cross Site Scripting","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":2.4,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":2.4,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":3.3,"vectorString":"AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"Cross Site Scripting"}]},{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"Code Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-04-25T21:00:24.121Z"},"timeline":[{"time":"2026-04-24T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-04-24T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-04-24T22:22:31.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Fergod (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-27T12:39:03.953764Z","id":"CVE-2026-7000","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-27T12:39:14.369Z"}}]}}}