Ausweisapp CVEs and Security Vulnerabilities

CVE-2026-127120

Governikus AusweisApp Mobile StartPAOSResponse cross site scripting

A vulnerability was found in Governikus AusweisApp Mobile up to 2.5.5. This impacts an unknown function of the component StartPAOSResponse Handler. Performing a manipulation of the argument ResultMessage results in cross site scripting. The attack can be initiated remotely. Upgrading to version 2.6.0 will fix this issue. Upgrading the affected component is advised. This CVE was requested by the vendor.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Governikus

Products

Ausweisapp Mobile

CVE-2026-90848

Governikus AusweisApp Desktop StartPAOSResponse cross site scripting

A weakness has been identified in Governikus AusweisApp Desktop up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5 is able to address this issue. It is recommended to upgrade the affected component. This CVE was requested by the vendor.