CVE-2020-26801: Tripplite SU2200RTXL2UA Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.

Affected products

• Tripplite SU2200RTXL2UA Firmware: version 12.04.0055 only

Published 2021-06-25. Last modified 2026-07-09.