{"schema":"threatline.record/2","record":{"id":"CVE-2026-105323","aliases":[],"summary":"Reflected XSS in Kulga Software's Kulga News Software","details":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.\n\nThis issue affects Kulga News Software: from v26.7.4 before v26.10.0.","categories":["Unclassified"],"product":"Kulga News Software","vendor":"Kulga Software and Telecommunications Limited Company","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105323","source_modified_at":"2026-10-27T11:39:34.238Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Kulga News Software","vendor":"Kulga Software and Telecommunications Limited Company","versions":[{"status":"affected","version":"v26.7.4","lessThan":"v26.10.0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":6.1,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T11:39:34.238Z","modified_at":"2026-10-27T11:39:34.238Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-105323","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T11:39:34.238Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1405","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T11:39:34.238Z","content_hash":"82f6ad699eec95c188a09ba11f36d3df10466874e133cc765b4c62e64f42af6e"}}