{"id":"CVE-2026-79419","title":"A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier","summary":"A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao…","severity":"high","cvss":8.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","cwe":["CWE-79"],"vendor":"emxtecnologia","product":"gestao_x_business_suite","affected":["gestao_x_business_suite <= 8.4"],"published":"2026-09-04","updated":"2026-09-17","sourceUpdated":"2026-09-17T19:20:50.983","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79419","references":[{"url":"https://drive.google.com/file/d/1QVH1MRo3G4KqmBORkhXITzcYmO_BDjWc/view","label":"cve@mitre.org"},{"url":"https://emxtecnologia.com.br/gestao-x-business-suite/","label":"cve@mitre.org"},{"url":"https://drive.google.com/file/d/1QVH1MRo3G4KqmBORkhXITzcYmO_BDjWc/view","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00269,"epssPercentile":0.1933,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-17T16:20:25.159980Z"},"ingestedAt":"2026-09-06T01:47:58.732Z","slug":"CVE-2026-79419","body":"## Overview\n\nA reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.\n\n## Affected\n\n- `gestao_x_business_suite <= 8.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":47.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":206428,"id":"CVE-2026-79419","ts":1789665846135,"field":"cvss","old":"5.4","new":"8.7"},{"seq":206427,"id":"CVE-2026-79419","ts":1789665846135,"field":"severity","old":"medium","new":"high"},{"seq":206092,"id":"CVE-2026-79419","ts":1789654805398,"field":"cvss","old":"6.1","new":"5.4"},{"seq":201970,"id":"CVE-2026-79419","ts":1789399993392,"field":"exploit_available","old":"false","new":"true"},{"seq":201969,"id":"CVE-2026-79419","ts":1789399993392,"field":"cvss","old":null,"new":"6.1"},{"seq":201968,"id":"CVE-2026-79419","ts":1789399993392,"field":"severity","old":"none","new":"medium"},{"seq":200697,"id":"CVE-2026-79419","ts":1789397585483,"field":"exploit_available","old":"true","new":"false"},{"seq":200696,"id":"CVE-2026-79419","ts":1789397585483,"field":"cvss","old":"6.1","new":null},{"seq":200695,"id":"CVE-2026-79419","ts":1789397585483,"field":"severity","old":"medium","new":"none"},{"seq":199397,"id":"CVE-2026-79419","ts":1789395475576,"field":"exploit_available","old":"false","new":"true"},{"seq":199396,"id":"CVE-2026-79419","ts":1789395475576,"field":"cvss","old":null,"new":"6.1"},{"seq":199395,"id":"CVE-2026-79419","ts":1789395475576,"field":"severity","old":"none","new":"medium"},{"seq":198642,"id":"CVE-2026-79419","ts":1789392188188,"field":"exploit_available","old":"true","new":"false"},{"seq":198641,"id":"CVE-2026-79419","ts":1789392188188,"field":"cvss","old":"6.1","new":null},{"seq":198640,"id":"CVE-2026-79419","ts":1789392188188,"field":"severity","old":"medium","new":"none"},{"seq":196973,"id":"CVE-2026-79419","ts":1789384273207,"field":"exploit_available","old":"false","new":"true"},{"seq":196972,"id":"CVE-2026-79419","ts":1789384273207,"field":"cvss","old":null,"new":"6.1"},{"seq":196971,"id":"CVE-2026-79419","ts":1789384273207,"field":"severity","old":"none","new":"medium"},{"seq":194104,"id":"CVE-2026-79419","ts":1789378694016,"field":"exploit_available","old":"true","new":"false"},{"seq":194103,"id":"CVE-2026-79419","ts":1789378694016,"field":"cvss","old":"6.1","new":null},{"seq":194102,"id":"CVE-2026-79419","ts":1789378694016,"field":"severity","old":"medium","new":"none"},{"seq":192891,"id":"CVE-2026-79419","ts":1789376494475,"field":"exploit_available","old":"false","new":"true"},{"seq":192890,"id":"CVE-2026-79419","ts":1789376494475,"field":"cvss","old":null,"new":"6.1"},{"seq":192889,"id":"CVE-2026-79419","ts":1789376494475,"field":"severity","old":"none","new":"medium"},{"seq":191678,"id":"CVE-2026-79419","ts":1789373590379,"field":"exploit_available","old":"true","new":"false"},{"seq":191677,"id":"CVE-2026-79419","ts":1789373590379,"field":"cvss","old":"6.1","new":null},{"seq":191676,"id":"CVE-2026-79419","ts":1789373590379,"field":"severity","old":"medium","new":"none"},{"seq":190463,"id":"CVE-2026-79419","ts":1789369449587,"field":"exploit_available","old":"false","new":"true"},{"seq":190462,"id":"CVE-2026-79419","ts":1789369449587,"field":"cvss","old":null,"new":"6.1"},{"seq":190461,"id":"CVE-2026-79419","ts":1789369449587,"field":"severity","old":"none","new":"medium"},{"seq":189250,"id":"CVE-2026-79419","ts":1789368373433,"field":"exploit_available","old":"true","new":"false"},{"seq":189249,"id":"CVE-2026-79419","ts":1789368373433,"field":"cvss","old":"6.1","new":null},{"seq":189248,"id":"CVE-2026-79419","ts":1789368373433,"field":"severity","old":"medium","new":"none"},{"seq":188033,"id":"CVE-2026-79419","ts":1789365211546,"field":"exploit_available","old":"false","new":"true"},{"seq":188032,"id":"CVE-2026-79419","ts":1789365211546,"field":"cvss","old":null,"new":"6.1"},{"seq":188031,"id":"CVE-2026-79419","ts":1789365211546,"field":"severity","old":"none","new":"medium"},{"seq":186820,"id":"CVE-2026-79419","ts":1789363454943,"field":"exploit_available","old":"true","new":"false"},{"seq":186819,"id":"CVE-2026-79419","ts":1789363454943,"field":"cvss","old":"6.1","new":null},{"seq":186818,"id":"CVE-2026-79419","ts":1789363454943,"field":"severity","old":"medium","new":"none"},{"seq":185606,"id":"CVE-2026-79419","ts":1789361195271,"field":"exploit_available","old":"false","new":"true"},{"seq":185605,"id":"CVE-2026-79419","ts":1789361195271,"field":"cvss","old":null,"new":"6.1"},{"seq":185604,"id":"CVE-2026-79419","ts":1789361195271,"field":"severity","old":"none","new":"medium"},{"seq":184393,"id":"CVE-2026-79419","ts":1789358318931,"field":"exploit_available","old":"true","new":"false"},{"seq":184392,"id":"CVE-2026-79419","ts":1789358318931,"field":"cvss","old":"6.1","new":null},{"seq":184391,"id":"CVE-2026-79419","ts":1789358318931,"field":"severity","old":"medium","new":"none"},{"seq":182644,"id":"CVE-2026-79419","ts":1789354302613,"field":"exploit_available","old":"false","new":"true"},{"seq":182643,"id":"CVE-2026-79419","ts":1789354302613,"field":"cvss","old":null,"new":"6.1"},{"seq":182642,"id":"CVE-2026-79419","ts":1789354302613,"field":"severity","old":"none","new":"medium"},{"seq":181437,"id":"CVE-2026-79419","ts":1789353280066,"field":"exploit_available","old":"true","new":"false"},{"seq":181436,"id":"CVE-2026-79419","ts":1789353280066,"field":"cvss","old":"6.1","new":null}]}