CVE-2022-50925

None

CVSS

—

EPSS

0.4%

Published

Jan 13, 2026

CISA due date

—

The record

Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard events through an exposed WebSocket on port 8082. Attackers can craft malicious web pages to inject keystrokes, opening applications and typing arbitrary text by sending specific WebSocket messages.

Affected packages

Ecosystem	Package	Introduced	Fixed