CVE-2026-31262

CVE-2026-31262 is a Cross Site Scripting (XSS) vulnerability affecting Altenar Sportsbook Software Platform (SB2) version 2.0, where remote attackers can inject malicious code through URL parameters to obtain sensitive information and execute arbitrary commands. The vulnerability carries a CVSS score of 6.1 (Medium severity) with a network-based attack vector requiring minimal complexity and user interaction, potentially resulting in limited disclosure and integrity impacts across multiple systems. The vulnerability demonstrates low exploitation prevalence with an EPSS score of 0.00049, indicating minimal real-world exploitation activity, and is not currently tracked on the Known Exploited Vulnerabilities (KEV) catalog or active threat intelligence lists. The FAUCET risk score of 34.0 out of 100 reflects moderate organizational concern. Organizations running Altenar SB2 v.2.0 should prioritize patching efforts in their standard vulnerability management timeline, particularly for internet-facing deployments.