TVN ID	TVN-202605003
CVE ID	CVE-2026-10057, CVE-2026-10058
CVSS	【CVE-2026-10057】 4.8 (Medium) CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N 【CVE-2026-10058】 4.8 (Medium) CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected Products	ITS Intelligent SCADA System version 2.1
Description	【CVE-2026-10057(Stored Cross-Site)】 Privileged remote attackers can inject persistent JavaScript codes that are executed in users' browsers upon page load. 【CVE-2026-10058(Stored Cross-Site)】 Privileged remote attackers can inject persistent JavaScript codes that are executed in users' browsers upon page load.
Credit	KAO YU KAI(LeaLea Technology)
Public Date	2026-05-29