5.3 MediumCWE-79
CVE-2026-4293
Kieback & Peter DDC Building Controllers Cross-site Scripting
Kieback & PeterDDC4002
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 24% of scored CVEs
SeverityCVSS
5.3Medium
Description NVD
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.
Coverage 1 article · 1 outlet
- Kieback & Peter DDC Building ControllersCISA · first in our coverage · official notice