← All credits

Matan Sandori and 2Bsecure

2 vulnerability records and advisories credit this contributor.

CVE-2026-78414
Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
CVE-2026-10056
CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request