CVE-2026-10857
Last modified
CVE-2026-10857 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-10857?
How severe is CVE-2026-10857?
How do I fix CVE-2026-10857?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-108564A reflected cross-site scripting vulnerability in the invoca…4.7
- CVE-2026-108565A reflected cross-site scripting vulnerability in the popup …4.7
- CVE-2026-108566A vulnerability has been found in InstantSoft icms2 up to 2.…3.5
- CVE-2026-108567A vulnerability was found in InstantSoft icms2 up to 2.18.2.…4.3
- CVE-2026-108568A vulnerability was determined in InstantSoft icms2 up to 2.…4.3
- CVE-2026-108569A vulnerability was identified in Furion .NET Framework up t…6.3
- CVE-2026-108570A security flaw has been discovered in Furion .NET Framework…6.3
- CVE-2026-108571A weakness has been identified in Xinhu Rainrock RockOA up t…7.3
- CVE-2026-108572A security vulnerability has been detected in Casdoor up to …4.3
- CVE-2026-108573A vulnerability was detected in Open Asset Import Library As…5.5
- CVE-2026-108574A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affec…4.3
- CVE-2026-108575A vulnerability has been found in BerriAI LiteLLM up to 1.94…6.3
Are you affected by CVE-2026-10857?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST