CVE-2026-47096 | AJA Video Systems HELO Plus up to 2.1.6 Web Configuration API eParamID_SystemName cross site scripting

September 30, 2026 Yanac

A vulnerability was found in AJA Video Systems HELO Plus up to 2.1.6. It has been declared as problematic. This issue affects some unknown processing of the component Web Configuration API. Such manipulation of the argument eParamID_SystemName leads to cross site scripting.

This vulnerability is referenced as CVE-2026-47096. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More