This vulnerability (CVE-2026-1819) in Karel Electronics Industry and Trade Inc.'s ViPort product is a Stored Cross-site Scripting (XSS) issue caused by improper input neutralization during web page generation. It allows attackers with at least low privileges to inject malicious scripts that execute in the context of other users' browsers, potentially leading to full compromise of confidentiality, integrity, and availability. The affected versions include ViPort through 23012026. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this Stored XSS vulnerability can lead to execution of arbitrary scripts in the context of affected users, potentially resulting in theft of sensitive information, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The CVSS score of 8.8 indicates a high impact if exploited. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected ViPort versions and apply any recommended configuration changes or workarounds from the vendor. Monitor for updates from Karel Electronics Industry and Trade Inc. regarding patches or mitigation steps.