This vulnerability (CVE-2026-6371) in Limatek System Inc. LimRAD NAC is due to improper neutralization of input during web page generation, leading to stored cross-site scripting (CWE-79). It affects versions before 5.5.7.3.9. The CVSS 3.1 vector indicates the attack requires adjacent network access, low attack complexity, low privileges, and user interaction, with a scope change and limited confidentiality and integrity impact. No known exploits are reported, and no vendor remediation level or patch information is currently available.

Successful exploitation can result in stored cross-site scripting, potentially allowing an attacker to execute malicious scripts in the context of the affected application. This can lead to limited confidentiality and integrity impacts, such as theft or manipulation of data accessible to the user. There is no impact on availability. The attack requires user interaction and low privileges on an adjacent network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected versions and applying input validation or output encoding workarounds if feasible. Monitor vendor communications for updates on patches or official mitigations.