Satel Netco Design

CISA published an ICS advisory for Satel Netco Design software versions prior to v2.1.7, disclosing four vulnerabilities. The vulnerabilities include a stored cross-site scripting flaw (CVE-2026-105269), an inefficient regular expression complexity issue (CVE-2026-104628), and two relative path traversal vulnerabilities in data import and export functionality (CVE-2026-105275 and CVE-2026-101024). The most severe vulnerability, CVE-2026-101024, carries a CVSS v3.1 score of 8.8 (HIGH) and could allow authenticated users with Viewer privileges to write attacker-influenced content to the file system, potentially enabling arbitrary code execution. The affected product is deployed worldwide in the Communications critical infrastructure sector, with the vendor headquartered in Finland. Satel recommends updating to version v2.1.7 to remediate all identified vulnerabilities. No known public exploitation has been reported to CISA at the time of publication. The vulnerabilities were reported by Alex Williams of Pellera Technologies.