CVE-2026-1001 — Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that allows authenticated administrators — CVE Database · The Intelligence Room