CVE-2026-7380

Medium

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows XSS Targeting HTML Attributes. This issue affects Access Control System (GKS): before Version 2.

SeverityMedium
CVSS6.1
Exploit probability—
ProductAccess Control System (GKS)
PublishedJul 7, 2026
First seenJul 7, 2026
Weakness typeCWE-80CWE-80

How to fix

Update
  • Armiya Information Technologies Ltd. Co. Access Control System (GKS)Version 2 or later

Affected products

ProductAffected versionsFixed in
Armiya Information Technologies Ltd. Co. Access Control System (GKS)v < Version 2Version 2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.