CVE-2026-79419

HIGH 8.7CVE-2026-79419 · Published 04/09/2026 · updated 17/09/2026

In short

CVE-2026-79419 is a HIGH (CVSS 8.7) vulnerability affecting gestao x business suite (emxtecnologia).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gestao x business suite emxtecnologia	`≤ 8.4`	No fix yet

Description

A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.

References

drive.google.com/file/d/1QVH1MRo3G4KqmBORkhXITzcYmO_BDjWc/view · Exploit
emxtecnologia.com.br/gestao-x-business-suite · Product

More vulnerabilities in gestao x business suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free