CVE-2026-41468

The SicuroWeb application embeds AngularJS component 1.5.2, which is an end-of-life version and contains known sandbox escape primitives. At the same time, the application contains a template injection vulnerability. The combination of both weaknesses allows an attacker to inject malicious payload into the AngularJS template and then exploit known sandbox escape techniques, achieving arbitrary JavaScript code execution in the operator's browser session. In environments using unencrypted HTTP protocol, an attacker located in the same network can deliver the complete attack chain via MITM method without active user interaction.

An attacker can hijack an operator's session, manipulate the DOM structure of the displayed page, and permanently compromise the victim's browser. In case of HTTP deployment, an attacker located in the same network can also intercept and modify network traffic.

Apply patches available from the manufacturer according to the references. Additionally, it is recommended to enforce encrypted HTTPS communication in all deployments to eliminate the risk of MITM attacks by attackers located in the adjacent network. AngularJS component 1.5.2 should be replaced with a currently maintained library.

Beghelli Sicuro24 SicuroWeb — versions embedding AngularJS 1.5.2 (end-of-life); specific versions indicated in manufacturer references