CVE-2026-7380

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows XSS Targeting HTML Attributes. This issue affects Access Control System (GKS): before Version 2.

• CWE-80

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0502

Published

Jul 7, 2026

Last Modified

Jul 7, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7374A flaw was found in KubeVirt's virt-handler component. This …9.9
• CVE-2026-7375UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4…7.5
• CVE-2026-7376Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows de…7.5
• CVE-2026-7377GitLab has remediated an issue in GitLab EE affecting all ve…5.4
• CVE-2026-7378Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows de…7.5
• CVE-2026-7379Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 all…7.5
• CVE-2026-7381Plack::Middleware::XSendfile versions through 1.0053 for Per…9.1
• CVE-2026-7382Exposure of Sensitive Information to an Unauthorized Actor, …6.5
• CVE-2026-7383Issue summary: A signed integer overflow when sizing the des…8.1
• CVE-2026-7384A vulnerability was detected in ezequiroga mcp-bases 357ca19…7.3
• CVE-2026-7385The Decent Comments WordPress plugin before 3.0.2 does not r…5.8
• CVE-2026-7386A flaw has been found in fatbobman mail-mcp-bridge up to 1.3…7.3