PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-105410 Dassault Systèmes CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-12T10:45:09.518Z and has not been modified since then. This Stored Cross-site Scripting (XSS) vulnerability affects Tuleap Enterprise Edition versions 17.0 through 17.5. Defenders should assess exposure, prioritize remediation, and implement compensating controls if necessary to prevent potential exploitation. The CVE record and source item provide details on the vulnerability, but additional verification is required to confirm affected deployments and assess security controls.

Vendor
Dassault Systèmes
Product
Tuleap Enterprise Edition
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for Tuleap Enterprise Edition installations, security teams, and IT personnel should assess exposure and prioritize remediation.

Why it matters

CVE-2026-105410 is a Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition versions 17.0 through 17.5. Defenders should prioritize verifying exposure, assessing security controls, and implementing remediation to prevent potential exploitation.

  • Defenders must verify exposure in Tuleap Enterprise Edition versions 17.0 through 17.5
  • Security teams should assess the effectiveness of current security controls
  • IT personnel must prioritize remediation and implement compensating controls if necessary

Technical summary

A Stored Cross-site Scripting (XSS) vulnerability affects Tuleap Enterprise Edition versions 17.0 through 17.5, potentially allowing an attacker to execute arbitrary script code in a user's browser session. Defenders should verify exposure in affected versions, assess the effectiveness of current security controls, and prioritize remediation to prevent exploitation. The vulnerability is confirmed, but additional details on exploitation and impact are limited.

Defensive priority

Defenders should prioritize verifying exposure in Tuleap Enterprise Edition versions 17.0 through 17.5 and assessing the effectiveness of current security controls.

Recommended defensive actions

  • Verify Tuleap Enterprise Edition versions 17.0 through 17.5 are installed and assess exposure
  • Review and update security controls to prevent exploitation
  • Monitor for suspicious activity and implement compensating controls if necessary

Evidence notes

The CVE record and source item provide details on a Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5. However, the corpus does not establish versions, exploitation, impact, or remediation beyond vendor advisories.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-105410 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-105410

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-105410 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105410

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.