{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/sns-enrollment-portal/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sns:enrollment_portal:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-113810"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["SNS Enrollment Portal"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe SNS Enrollment Portal contains a stored cross-site scripting (XSS) vulnerability, identified as CVE-2026-113810. An unauthenticated attacker can exploit this by submitting a crafted payload during the certificate creation request via the portal. The malicious script is stored within the portal and is subsequently triggered when a system administrator views or validates the certificate request. This vulnerability poses a significant risk to the administrative environment, as successful exploitation could lead to administrative session compromise, unauthorized actions, or further interaction with the management interface under the context of the administrator's account. Defenders should monitor for anomalous inputs within the enrollment portal's certificate request fields.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker navigates to the public-facing SNS Enrollment Portal captive portal.\u003c/li\u003e\n\u003cli\u003eAttacker initiates a certificate creation request.\u003c/li\u003e\n\u003cli\u003eAttacker injects a JavaScript payload into one of the user-supplied fields during the enrollment process.\u003c/li\u003e\n\u003cli\u003eThe application processes the request and saves the malicious script into the internal portal database.\u003c/li\u003e\n\u003cli\u003eAn administrator logs into the administrative console of the SNS Enrollment Portal.\u003c/li\u003e\n\u003cli\u003eThe administrator accesses the list of pending certificate requests to perform validation.\u003c/li\u003e\n\u003cli\u003eThe browser renders the stored malicious script in the administrator's session context.\u003c/li\u003e\n\u003cli\u003eThe script executes, potentially allowing the attacker to steal administrative session cookies or perform unauthorized administrative actions.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows for the compromise of administrative sessions within the SNS Enrollment Portal. This can result in unauthorized modifications, unauthorized certificate issuance, or the potential for lateral movement from the portal to deeper administrative functions, depending on the privileges and scope of the affected administrator.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor web server logs and application logs for unusual characters, such as \u0026lt;script\u0026gt;, javascript:, or other HTML/JS tags, in fields associated with the certificate enrollment portal.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation and output encoding for all user-supplied data accepted by the SNS Enrollment Portal to prevent script injection.\u003c/li\u003e\n\u003cli\u003eAudit administrative access logs to identify unusual patterns occurring immediately after viewing certificate enrollment requests.\u003c/li\u003e\n\u003cli\u003eEnsure that the SNS Enrollment Portal is updated to the latest vendor-provided version that addresses CVE-2026-113810.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T19:45:44Z","date_published":"2026-10-20T19:45:44Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-113810/","summary":"A stored cross-site scripting vulnerability in the SNS Enrollment Portal allows an unauthenticated attacker to inject malicious scripts during the certificate request process, which execute when an administrator validates the request.","title":"SNS Enrollment Portal: Stored cross-site scripting (CVE-2026-113810)","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-113810/"}],"language":"en","title":"CraftedSignal Threat Feed - SNS Enrollment Portal","version":"https://jsonfeed.org/version/1.1"}