CVE Intelligence

Airc vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Airc products: 7 record(s), with severity, exploitation and fixes.

Mynet 7

Exploited only (KEV) →

CVE-2024-40317 Medium · 6.1 CWE-79 Dec 24, 2025
Cross-site Scripting (XSS) in Airc Mynet
A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.
CVE-2024-39037 Medium · 6.5 CWE-89 Dec 24, 2025
SQL Injection in Airc Mynet
MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.
CVE-2024-35322 Medium · 6.1 CWE-79 Dec 24, 2025
Cross-site Scripting (XSS) in Airc Mynet
MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.
CVE-2024-27708 Critical · 9.6 CWE-74 Dec 22, 2025
Injection in Airc Mynet
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.
CVE-2024-25812 Medium · 6.1 CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Airc Mynet
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.
CVE-2024-35321 Medium · 4.3 CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Airc Mynet
MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter.
CVE-2024-25814 Medium · 6.1 CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Airc Mynet
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.