Advisory ID: LINA/ADE-2026-0001

Synopsis:

A vulnerability of the reflected XSS type has been discovered.

Product:

Lina/ADE web API

Version:

Before 7.2.3, 7.1.7

Problem Type:

Reflected Cross-Site Scripting (XSS)

Description:

Such a vulnerability could be exploited by an attacker and can cause several problems for the end user that range in severity from an annoyance to complete account compromise.

Mitigation or workaround:

We strongly recommend upgrading to Lina 7.1.7 or 7.2.3, as it best suits you.

Acknowledgement:

We would like to thank UTC’s CISO deputy for disclosing this vulnerability to our support team.