{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5754", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-04-07T16:18:19.839Z", "datePublished": "2026-04-14T17:51:12.616Z", "dateUpdated": "2026-04-21T16:25:02.461Z"}, "containers": {"cna": {"title": "Radware Alteon has a reflected XSS vulnerability", "descriptions": [{"lang": "en", "value": "Reflected Cross-Site Scripting (XSS) Vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized actions, data theft, or other malicious activities."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Radware", "product": "Alteon vADC", "versions": [{"status": "affected", "version": "34.5.4.0"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "references": [{"url": "https://www.radware.com/products/alteon/"}], "x_generator": {"engine": "VINCE 3.0.35", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5754"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-04-14T17:52:21.871Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-16T11:43:25.734718Z", "id": "CVE-2026-5754", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-16T12:05:53.478Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/890999"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-21T16:25:02.461Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/890999"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-21T16:25:02.461Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-5754", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-16T11:43:25.734718Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-16T11:43:13.739Z"}}], "cna": {"title": "Radware Alteon has a reflected XSS vulnerability", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Radware", "product": "Alteon vADC", "versions": [{"status": "affected", "version": "34.5.4.0"}]}], "references": [{"url": "https://www.radware.com/products/alteon/"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.35", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5754"}, "descriptions": [{"lang": "en", "value": "Reflected Cross-Site Scripting (XSS) Vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized actions, data theft, or other malicious activities."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-04-14T17:52:21.871Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5754", "state": "PUBLISHED", "dateUpdated": "2026-04-21T16:25:02.461Z", "dateReserved": "2026-04-07T16:18:19.839Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-04-14T17:51:12.616Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Reflected Cross-Site Scripting (XSS) Vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized actions, data theft, or other malicious activities."}], "id": "CVE-2026-5754", "lastModified": "2026-04-21T17:16:57.940", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-04-14T18:17:39.487", "references": [{"source": "cret@cert.org", "url": "https://www.radware.com/products/alteon/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.kb.cert.org/vuls/id/890999"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Awaiting Analysis"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "34.5.4.0"}}], "enrichment": {"confidence": 85.0, "confidence_source": "matching", "scores": [{"score": 85.0, "source": "matching"}]}, "original": {"product": "Alteon vADC", "source": "cna", "vendor": "Radware"}, "product": "alteon", "vendor": "radware"}], "analysis": {"en": {"generated_at": "2026-04-17T11:25:26.304124+00:00", "value": {"mitigation_remediation": ["Update Radware Alteon to a version newer than 34.5.4.0 that contains the fix", "If an upgrade is not immediately possible, restrict or sanitize incoming query parameters on the load\u2011balancer to prevent script injection", "Enable or enforce a strict Content\u2011Security\u2011Policy on downstream applications so that even reflected scripts are blocked from execution", "Monitor web traffic for anomalous requests that may indicate exploitation attempts", "Consult Radware\u2019s product support for any interim mitigations or additional configuration guidance"], "summary": {"action": "Apply Patch", "impact": "Cross\u2011Site Scripting that can lead to unauthorized actions or data theft"}, "threat_synthesis": {"affected_systems": "The flaw affects Radware\u2019s Alteon vADC load\u2011balancer running version 34.5.4.0. Any deployment of this specific version is at risk until a newer, patched release is applied.", "description_and_impact": "Radware Alteon 34.5.4.0 vADC load\u2011balancer contains a reflected Cross\u2011Site Scripting flaw that allows an attacker to inject malicious scripts into responses returned to a user. The injected scripts can execute in the victim\u2019s browser, potentially enabling cookie theft, session hijacking, or execution of further malicious code. The vulnerability is a reflected XSS and could be exploited through crafted URLs or form submissions that pass through the load balancer.", "risk_and_exploitability": "An EPSS score of less than 1% indicates a low probability of exploitation, and the vulnerability is not listed in CISA\u2019s KEV catalog; however, reflected XSS is widely exploitable through normal web traffic. Attackers can trigger the vulnerability by sending a crafted request to the load balancer, making the risk moderate to high, especially if users are permitted to input arbitrary data that the balancer reflects. The absence of an official fix in the provided data means the compromise remains possible until remediation is applied."}}}}, "created": "2026-04-15T14:31:56.908667+00:00", "updated": "2026-04-17T11:30:16.990917+00:00", "vendors": ["radware", "radware$PRODUCT$alteon"], "weaknesses": ["CWE-79"]}