CVE-2024-27708

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.

Score

CVSS 3.1 9.6 Critical

Status

Analyzed - cve@mitre.org

Published

2025-12-22

Last modified

2025-12-22

Weaknesses

CWE-74, CWE-75

Affected products

• Mynet (Airc)

References

• https://github.com/esquim0/Common_Vulnerabilities_and_Exposures_CVE/blob/main/2024/MyNet.md
• https://www.airc.pt/solucoes-servicos/solucoes?segment=MYN