CVE-2026-22191 Beghelli Sicuro24 SicuroWeb AngularJS Template Injection
Attackers can execute arbitrary JavaScript in operator browser sessions via AngularJS template injection, particularly in plaintext HTTP deployments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-22191?
CVE-2026-22191 is a medium-severity code injection vulnerability in Beghelli SicuroWeb (Sicuro24), published on 13 Mar 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper rendering of untrusted input in AngularJS template contexts. Attackers can inject malicious expressions that are compiled and executed by the AngularJS 1.5.2 runtime to achieve arbitrary JavaScript execution in operator browser sessions, with network-adjacent attackers able to deliver payloads via MITM injection in plaintext HTTP deployments.
Weakness: CWE-1336
Which versions are affected by CVE-2026-22191?
It affects 1 product.
Products include Gvectors Wpdiscuz.
How do I fix CVE-2026-22191?
No fix has been published for CVE-2026-22191 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-22191 being exploited?
There is no known exploitation of CVE-2026-22191 in the wild and no public exploit code.
Other vulnerabilities in Beghelli SicuroWeb (Sicuro24)
- CVE-2020-24186 File upload in n/a
- CVE-2024-9488 Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
- CVE-2020-13640 SQL injection in n/a
- CVE-2026-22193 wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()
- CVE-2026-22192 Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage
Sources
Also known as GHSA-q226-8c4v-p73w.