Keystorage vulnerabilities
Published CVEs affecting Keystorage products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-26724
High · 7.6
CWE-79 Feb 20, 2026
Cross-site Scripting (XSS) in Keystorage Global Facilities Management Software
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.
CVE-2026-26723
High · 8.2
CWE-79 Feb 20, 2026
Cross-site Scripting (XSS) in Keystorage Global Facilities Management Software
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter.
CVE-2026-26722
Critical · 9.4
CWE-269 Feb 20, 2026
Improper Privilege Management in Keystorage Global Facilities Management Software
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality.
CVE-2026-26721
High · 7.1
CWE-598 Feb 20, 2026
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a…
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.