A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user… (CVE-2026-81635)
A cross-site scripting (XSS) vulnerability exists in SHIRASAGI that may allow an attacker to execute arbitrary scripts in the web browser of users who visit a website using the affected product. This vulnerability is identified as CVE-2026-81635 and has a CVSS 3.0 base score of 5.4, indicating medium severity. The vulnerability requires low attack complexity and privileges, with user interaction needed. It impacts confidentiality and integrity but not availability. No specific affected versions or patches are currently provided.
AI Analysis
Technical Summary
CVE-2026-81635 is a cross-site scripting vulnerability in SHIRASAGI that enables an attacker to execute arbitrary scripts in the context of a user's browser when accessing a website running the vulnerable software. The vulnerability is classified under CWE-79 and has a CVSS 3.0 score of 5.4 (medium severity). It requires network access, low complexity, and some privileges with user interaction. The vulnerability affects confidentiality and integrity with no known exploits in the wild. No patch or remediation information is currently available.
Potential Impact
Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to information disclosure or manipulation of web content. The impact affects confidentiality and integrity but does not affect availability. There are no known active exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted content on affected SHIRASAGI websites. Monitor vendor channels for updates regarding patches or mitigations.
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user… (CVE-2026-81635)
Description
A cross-site scripting (XSS) vulnerability exists in SHIRASAGI that may allow an attacker to execute arbitrary scripts in the web browser of users who visit a website using the affected product. This vulnerability is identified as CVE-2026-81635 and has a CVSS 3.0 base score of 5.4, indicating medium severity. The vulnerability requires low attack complexity and privileges, with user interaction needed. It impacts confidentiality and integrity but not availability. No specific affected versions or patches are currently provided.
CVSS v3.0
Score 5.4medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-81635 is a cross-site scripting vulnerability in SHIRASAGI that enables an attacker to execute arbitrary scripts in the context of a user's browser when accessing a website running the vulnerable software. The vulnerability is classified under CWE-79 and has a CVSS 3.0 score of 5.4 (medium severity). It requires network access, low complexity, and some privileges with user interaction. The vulnerability affects confidentiality and integrity with no known exploits in the wild. No patch or remediation information is currently available.
Potential Impact
Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to information disclosure or manipulation of web content. The impact affects confidentiality and integrity but does not affect availability. There are no known active exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted content on affected SHIRASAGI websites. Monitor vendor channels for updates regarding patches or mitigations.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gmpr-6m7m-7m27
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-81635"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.0
Threat ID: 6aa2af63acd9273b4925a6d7
Added to database: 09/10/2026, 13:23:47 UTC
Last enriched: 09/10/2026, 13:29:39 UTC
Last updated: 09/10/2026, 16:53:05 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.