CVE-2026-105269: CWE-79 in Satel Satel Netco Design

CVE-2026-105269 is a stored cross-site scripting vulnerability in Satel Netco Design software versions before 2.1.7. It allows an authenticated user with Network Operator privileges to inject untrusted content that is rendered without adequate neutralization. When other users view this content, it can lead to script execution in their browsers. This vulnerability is identified as CWE-79 and has a CVSS 4.0 base score of 8.5, indicating high severity. No known exploits in the wild have been reported, and no explicit patch links are provided in the data.

Successful exploitation could allow script execution in another user's browser, potentially leading to session hijacking, unauthorized actions, or data theft within the context of the affected application. The attacker must have Network Operator privileges and the victim must view the malicious content. The vulnerability does not require user interaction beyond viewing the stored content.

A fixed version 2.1.7 or later is implied by the affected versions data, indicating remediation is available. Users should upgrade Satel Netco Design to version 2.1.7 or later to address this vulnerability. No vendor advisory content was provided to confirm patch availability explicitly, so verify with the vendor for official patch status and guidance.