CVE-2019-10846: Computrols Building Automation System

Medium severity, CVSS 6.1. EPSS: 4.7% chance of exploitation in the next 30 days.

Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.

Affected products

• Computrols Computrols Building Automation System: up to and including 19.0.0

Published 2019-05-23. Last modified 2026-06-17.