---
id: CVE-2026-105269
title: >-
  Satel Netco Design versions prior to v2.1.7 contains a stored cross site
  scripting vulnerability
summary: >-
  Satel Netco Design versions prior to v2.1.7 contains a stored cross site
  scripting vulnerability. An authenticated user with Network Operator
  privileges could store untrusted content that is rendered without adequate
  neutralization. Succ…
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-79
published: '2026-10-08'
updated: '2026-10-09'
sourceUpdated: '2026-10-09T16:41:30.857'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-105269'
references:
  - url: >-
      https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-03.json
    label: ics-cert@hq.dhs.gov
  - url: 'https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-03'
    label: ics-cert@hq.dhs.gov
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-08T23:16:47.387Z'
epss: 0.00364
epssPercentile: 0.30457
vendor: Satel
product: Satel Netco Design
affected:
  - netco_design < v2.1.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-09T14:30:34.006892Z'
---

## Overview

Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another user's browser when the affected content is viewed.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.