Symantec SEDR Console <4.13 XSS Vulnerability
CVE-2026-19810 Published on October 13, 2026

Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console
Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another users session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.

NVD

Vulnerability Analysis

CVE-2026-19810 is exploitable with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

What is a XSS Vulnerability?

The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVE-2026-19810 has been classified to as a XSS vulnerability or weakness.


Affected Versions

Broadcom Symantec Endpoint Detection and Response: