by Kastro
Paper/Archive/CVE-2026-41031

CVE-2026-41031

Skilja GmbH Vinna Process Monitor — A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 15.5.155 × 203.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enables attackers to steal administrative access tokens and session credentials.

Affected

ProductAffectedFixed inSource
Vinna Process Monitor3.1.2 – < 4.0.64.0.6CNA

Scores by source

CERTVDE (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H
CERTVDE (CNA)8.7CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refpartner.skilja.com/uncategorized/security-advisory-stored-xss-in-vinna-process-monitor-cve-2026-41031