The vulnerability identified as CVE-2026-8403 is a stored cross-site scripting (CWE-79) issue in SYSGUARD 6001 by Eksagate Electronic Engineering and Computer Industry Trade Inc. It results from improper input neutralization during web page generation, which can allow an attacker to inject and store malicious scripts that execute in the context of a user's browser. The affected versions include 2.0.2 and potentially other versions before 6.1.4.0. The vendor has confirmed that the product is no longer supported, and no remediation or patch is available. The vulnerability has a CVSS 3.1 score of 6.1, reflecting medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to information disclosure or manipulation of user interactions within the affected web application. The impact is limited to confidentiality and integrity with no availability impact. Since the product is unsupported and unpatched, affected systems remain vulnerable.

No official fix or patch is available as the vendor no longer supports SYSGUARD 6001. Organizations using affected versions should consider mitigating risk by isolating or discontinuing use of the vulnerable product. Employing web application firewalls or input validation controls externally may help reduce exposure, but no vendor-provided remediation exists. Patch status is not yet confirmed due to lack of vendor support; check for any community or third-party mitigations if available.