CVE-2026-19471
Rockwell Automation ArmorStart® LT Stored Cross-site scripting
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 1, 2026
- Updated
- Sep 1, 2026
- Reserved
- Aug 10, 2026
Description
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | Rockwell |
Weaknesses
- CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')
Affected Products
| Product | Versions |
|---|---|
ArmorStart® LTRockwell Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.