CVE-2024-40317: Airc Mynet

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.

Affected products

• Airc Mynet: up to and including 26.08

Published 2025-12-24. Last modified 2026-06-17.