As cited
Copy frozen at (site build).
vulnerabilities
Satel Netco Design
Satel Netco Design versions prior to v2.1.7 contain four vulnerabilities: a stored cross-site scripting flaw (CVE-2026-105269), an inefficient regular expression complexity issue (CVE-2026-104628), and two relative path traversal flaws in data import and export functions (CVE-2026-105275 and CVE-2026-101024). Authenticated users with Network Operator or Viewer privileges can exploit these to execute scripts, degrade application availability, enumerate or access files, and potentially achieve remote code execution (RCE). Satel advises updating to v2.1.7 to remediate all four issues.
Why it matters: Organizations deploying Satel Netco Design in critical communications infrastructure worldwide must patch to v2.1.7 immediately to prevent insider abuse of these authenticated flaws, particularly the file write vulnerability that could lead to RCE.
- Source published
- First seen by Cybersecurity Tracker