VULNERABILITY INTELLIGENCE

CVE-2026-42931

CVSS score6.5 MEDIUM

EPSS probability0.27%

CISA KEVNot currently listed

Published2026-08-13

Last modified2026-08-26

Description

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.