CVE-2026-19810

CVE-2026-19810 · Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.

CVSS 5.4 · Medium · EPSS 0.2%

Published

2026-10-13T20:03:05.034Z

Updated

2026-10-14T18:42:07.650Z

Check your server →