CVE-2026-26724: Keystorage Global Facilities Management Software

High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.

Affected products

• Keystorage Global Facilities Management Software: version 20230721a only

Published 2026-02-20. Last modified 2026-06-17.