This vulnerability (CVE-2026-8403) in SYSGUARD 6001 arises due to improper input sanitization during web page generation, enabling stored cross-site scripting attacks. An attacker can inject malicious scripts that persist on the affected system and execute in the context of users accessing the web interface. The affected version explicitly identified is 2.0.2. The vendor has confirmed the product is no longer supported, and no remediation or patch is provided. The CVSS vector indicates the attack is network exploitable, requires no privileges, user interaction is required, and the impact is limited to low confidentiality and integrity impacts without availability impact.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure and integrity issues within the affected system. There is no impact on availability. The vulnerability is exploitable remotely without authentication but requires user interaction. Since the product is unsupported, no vendor-provided fix or mitigation exists.

No official fix or patch is available as the vendor no longer supports SYSGUARD 6001. Users should consider discontinuing use of the affected version or isolating the affected system to reduce exposure. Employing external mitigations such as web application firewalls or input filtering proxies may help reduce risk, but no vendor-endorsed mitigation is provided. Patch status is not yet confirmed due to lack of vendor support.