CVE-2026-32963

SD-330AC and AMC Manager provided by silex technology, Inc. contain a reflected cross-site scripting vulnerability. When a user logs in to the affected device and access some crafted web page, arbitrary script may be executed on the user's browser.

• CWE-79

• https://jvn.jp/en/vu/JVNVU94271449/Third Party Advisory
• https://www.silex.jp/support/security-advisories/2026-001Vendor Advisory
• https://www.silex.jp/support/security-advisories/en/2026-001Vendor Advisory

Published

Apr 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32958SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32959SD-330AC and AMC Manager provided by silex technology, Inc. …8.2
• CVE-2026-3296The Everest Forms plugin for WordPress is vulnerable to PHP …9.8
• CVE-2026-32960SD-330AC and AMC Manager provided by silex technology, Inc. …7.1
• CVE-2026-32961SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32962SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32964SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32965Initialization of a resource with an insecure default vulner…8.7
• CVE-2026-32966DataSource API Missing Authorization Check Leads to Arbitrar…9.8
• CVE-2026-32967Incorrect Authorization vulnerability of `/v2` experimental …9.1
• CVE-2026-32968Due to the improper neutralisation of special elements used …9.8
• CVE-2026-32969An unauthenticated remote attacker can exploit a Pre-Auth bl…7.5