CVE-2026-76975

Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper sanitization, causing attacker-supplied script to execute in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope, impacting confidentiality and integrity, while availability remains unaffected.

Score
CVSS 3.1 6.1 Medium
Status
Awaiting Analysis - cna@sap.com
Published
2026-10-13
Last modified
2026-10-15
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about