PatchSiren cyber security CVE debrief
CVE-2026-1819 Karel Electronics Industry and Trade Inc. CVE debrief
A HIGH severity vulnerability, CVE-2026-1819, was found in ViPort by Karel Electronics Industry and Trade Inc. This vulnerability is classified as Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') and has a CVSS score of 8.8. The vulnerability affects ViPort through version 23012026.
- Vendor
- Karel Electronics Industry and Trade Inc.
- Product
- ViPort
- CVSS
- HIGH 8.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-02-04
- Original CVE updated
- 2026-06-06
- Advisory published
- 2026-02-04
- Advisory updated
- 2026-06-06
Who should care
Users of ViPort by Karel Electronics Industry and Trade Inc. should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
CVE-2026-1819 is a Stored XSS vulnerability due to improper neutralization of input during web page generation. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Defensive priority
HIGH
Recommended defensive actions
- Update ViPort to a version that is not vulnerable.
- Implement additional security measures to detect and prevent XSS attacks.
Evidence notes
The CVE record and NVD detail can be found at resourceLinkAnnotations: cve-org and nvd.
Official resources
CVE-2026-1819 was published on 2026-02-04T08:16:06.820Z and modified on 2026-06-06T08:16:53.180Z.