Key Systems Global Facilities Management Software allows malicious code execution via input fields

Summary

A vulnerability in Key Systems Global Facilities Management Software allows hackers to inject and run their own code on your system. This could lead to unauthorized access or data theft. You should update to the latest version of the software as soon as possible to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
keystorage	global_facilities_management_software	20230721a	–

Original title

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on ...

Original description

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.

nvd CVSS3.1 7.6

Vulnerability type

CWE-79 Cross-site Scripting (XSS)

https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2026-26724 Exploit Third Party Advisory