Critical Cross-Site Scripting Vulnerability in Netgate Systems (cert.ssi.gouv.fr)

• Remote XSS vulnerability confirmed
• Risk of unauthorized code injection
• Immediate patching recommended for infrastructure protection

"A security vulnerability has been identified in Netgate products, enabling remote attackers to perform Cross-Site Scripting (XSS) attacks. This flaw allows the injection of malicious code into web interfaces, potentially compromising administrative sessions and infrastructure control. Users are urged to apply the latest security patches to mitigate risks to network integrity and prevent unauthorized access by third parties."