CVE-2026-41468

OVERVIEW: CVE-2026-41468 affects Beghelli Sicuro24 SicuroWeb, which uses an outdated and vulnerable version of AngularJS (1.5.2) containing known sandbox escape primitives. Combined with template injection flaws present in the application, this vulnerability enables attackers to escape the AngularJS sandbox and execute arbitrary JavaScript code within operator browser sessions. The flaw facilitates session hijacking, DOM manipulation, and persistent browser compromise. SEVERITY: The vulnerability carries a CVSS score of 8.7 (HIGH) with an attack vector of adjacent network, requiring no privileges or special user interaction. Attack complexity is low, and the impact spans multiple security domains—confidentiality, integrity, and availability are all affected. Network-adjacent attackers can exploit this via man-in-the-middle attacks on plaintext HTTP deployments, making the threat particularly acute in environments without HTTPS enforcement. EXPLOITATION STATUS: This vulnerability is currently listed on the active Hot List and has been identified as a known exploited vulnerability concern. While the EPSS score of 0.00066 suggests relatively lower exploitation probability across the CVE landscape, the practical attack chain is complete and viable. The combination of outdated component usage with application-level template injection creates a readily exploitable condition for threat actors positioned on the network.