A vulnerability was identified in Beetel 450TC3 01.00.00_01. (CVE-2026-82488)

CVE-2026-82488 is a cross-site scripting vulnerability in the User Management component of Beetel 450TC3 01.00.00_01. The flaw arises from improper sanitization of the Username argument, enabling remote attackers with low privileges to execute script code in the context of the affected application. The vulnerability is classified under CWE-79 and has a CVSS 3.1 base score of 3.5 (low severity). No patch or official remediation has been disclosed, and the vendor has not responded to disclosure attempts.

The vulnerability allows an attacker with limited privileges to perform cross-site scripting attacks by manipulating the Username argument. This can lead to limited impact such as injection of malicious scripts that may affect user interactions or session integrity. There is no confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor for vendor updates regarding a fix.