Skip to content
High Severity XSS Vulnerability in airMAX M Devices Disclosed

High Severity XSS Vulnerability in airMAX M Devices Disclosed

First seen 27 Oct 2026, 16:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 18:17 UTC
  • •CVE-2026-116836 is a high severity XSS vulnerability with a CVSS score of 8.8.
  • •Unauthenticated attackers on adjacent networks can exploit this flaw to escalate privileges.
  • •A patch is available; users must update to firmware version 6.3.26 or later.

On October 27, 2026, CVE-2026-116836 was published, revealing a Stored Cross-Site Scripting (XSS) vulnerability in airMAX M devices. This flaw allows unauthenticated attackers on adjacent networks to escalate privileges under certain conditions. The vulnerability has a CVSS score of 8.8, indicating high severity, and poses risks to device confidentiality, integrity, and availability. Currently, there is no public proof-of-concept or confirmed exploitation reported. A patch is available, and users are urged to update their firmware to version 6.3.26 or later. Security measures include restricting network access and monitoring for suspicious activity. The vulnerability was disclosed by multiple sources on the same day.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
CVE-2026-116836 published
The vulnerability in airMAX M devices was disclosed, allowing privilege escalation via XSS.
Feedly
2026-10-27
Patch released
Firmware version 6.3.26 or later is available to mitigate the vulnerability.
TheHackerWire

More articles in this cluster (6)

Following this threat?

Track CVE-2026-116836 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

What devices are affected?
The vulnerability affects airMAX M devices that have not been updated to firmware version 6.3.26 or later.
Is there any evidence of exploitation?
Currently, there is no evidence of exploitation or public proof-of-concept for this vulnerability.
What should organizations do to protect themselves?
Organizations should immediately update their airMAX M devices to the latest firmware and restrict access from untrusted networks.