CVE-2026-3877 - Vulnerability Analysis

Overview

VertiGIS FM solution contains a reflected XSS caused by improper sanitization in dashboard search functionality, letting attackers execute arbitrary JavaScript in authenticated users' context via crafted URLs, exploit requires user interaction.

Severity & Score

Impact

Attackers can execute arbitrary JavaScript in authenticated users' browsers, potentially stealing session data or performing actions on their behalf.

Mitigation

Update to the latest version with the XSS fix applied.

References

• https://www.redguard.ch/blog/2026/04/01/advisory-vertigis-vertigisfm/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner