CVE-2026-127120 | Governikus AusweisApp Mobile up to 2.5.5 StartPAOSResponse ResultMessage cross site scripting

November 12, 2026 Yanac

A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. It has been rated as problematic. This impacts an unknown function of the component StartPAOSResponse Handler. Performing a manipulation of the argument ResultMessage results in cross site scripting.

This vulnerability is identified as CVE-2026-127120. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.

This CVE was requested by the vendor.VulDB Recent EntriesRead More