CVE-2026-97358

An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom

Base score7.0/ 10

SeverityHighCVSS 4.0

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorNetworkAV

Attack complexityLowAC

Attack requirementsPresentAT

Privileges requiredNonePR

User interactionNoneUI

Vulnerable system confidentialityLowVC

Vulnerable system integrityLowVI

Vulnerable system availabilityLowVA

Subsequent system confidentialityLowSC

Subsequent system integrityHighSI

Subsequent system availabilityLowSA

CVSS vector stringCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityB.Braun

Last updatedNov 13, 2026 19:31:51 UTC

PublishedNov 13, 2026 17:55:24 UTC

ReservedSep 24, 2026 13:21:42 UTC