CVE-2026-92976
Stored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. An authenticated user could inject malicious HTML or JavaScript content into the fields containing their personal data. The content entered is stored and displayed without being properly sanitised when another user, including administrative staff, views the affected profile. Successful exploitation could allow JavaScript code to be executed in the victim’s browser, access to information available within the session, or the performance of actions using the victim’s permissions.
| CWE | CWE-613 |
| Vendor | t-systems |
| Product | tao |
| Published | Sep 18, 2026 |
| Last Updated | Sep 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for t-systems tao
Be the first to know when new unknown vulnerabilities affecting t-systems tao are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
T-Systems / TAO
2.0
References
Credits
Cayetano de Juan Úbeda