T-Systems CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM T-Systems CVE published 2026-09-18

CVE-2026-92976

A stored Cross-Site Scripting (XSS) vulnerability exists in T-Systems' TAO 2.0 suite, specifically in the profile management functionality. An authenticated user can inject malicious HTML or JavaScript content into personal data fields, which are then stored and displayed without proper sanitization when viewed by another user, including administrative staff. This could allow JavaScript code execution in [truncated]