Is CVE-2026-104628 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-104628

Update Satel Netco Design to version 2.1.7 or later. All known vulnerabilities affect only versions prior to v2.1.7. Enforce strict least-privilege access controls to limit attacker authentication scope.

Quick answers

What is CVE-2026-104628?: Update Satel Netco Design to version 2.1.7 or later. All known vulnerabilities affect only versions prior to v2.1.7. Enforce strict least-privilege access controls to limit attacker authentication scope.
How severe is CVE-2026-104628?: high, CVSS 8.5
Is CVE-2026-104628 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-104628 be mitigated?: Update Satel Netco Design to version 2.1.7 or later. All known vulnerabilities affect only versions prior to v2.1.7. Enforce strict least-privilege access controls to limit attacker authentication scope.

CVSS

8.5

Vendor

Satel

Published

Oct 9, 2026 · 04:07

Patch

Unknown / not confirmed

Affected products

Satel Netco Design

Mitigation

CISA Advises Updates for Satel Netco Design Following Multiple Vulnerability Disclosure

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an industrial control systems advisory (ICSA-26-281-03) disclosing four vulnerabilities in Satel Netco Design software. The flaws affect all versions prior to v2.1.7 and include a stored cross-site scripting vulnerability, an inefficient regular expression complexity issue, and two relative path traversal flaws in data import and export functions. Exploitation could allow authenticated attackers to execute scripts in a user's browser, consume excessive system resources, enumerate and modify files, and potentially execute arbitrary code. Satel has advised users to update to v2.1.7 to remediate the issues.

12m

CVE-2026-104628

Quick answers

Related News

CISA Advises Updates for Satel Netco Design Following Multiple Vulnerability Disclosure