Beghelli SicuroWeb: EOL AngularJS Exposes Operators to Session Hijacking

The National Vulnerability Database has disclosed CVE-2026-41468, affecting Beghelli Sicuro24 SicuroWeb. The core issue stems from the application embedding AngularJS 1.5.2, a component that reached end-of-life years ago. This EOL version contains known sandbox escape primitives, which, when combined with template injection vulnerabilities within SicuroWeb, allow attackers to break out of the AngularJS sandbox.

This vulnerability enables arbitrary JavaScript execution in operator browser sessions. The implications are severe: session hijacking, DOM manipulation, and persistent browser compromise are all on the table. Crucially, the National Vulnerability Database notes that network-adjacent attackers can deliver the complete injection and escape chain via man-in-the-middle (MITM) in plaintext HTTP deployments, requiring no active user interaction.

With a CVSS score of 8.7 (HIGH), this isn’t theoretical. Attackers can leverage this to gain significant control over operator environments, leading to potential broader network access or data exfiltration. Any organization using Beghelli Sicuro24 SicuroWeb needs to understand the immediate and critical risk this poses.