Threats tagged 'brew-recon-ng-cve-2026-59926'

CVE-2026-59926 is a cross-site scripting (XSS) vulnerability in the Adr viewer's Mistune component used by recon-ng. The flaw stems from improper escaping of the Admonition directive's class option before it is inserted into the HTML class attribute. Although the directive name is validated, the class option is not sanitized, allowing injection of malicious code. Multiple specific versions of recon-ng are affected. A patch fixing this issue is available in versions 1.4.0_6 and 5.1.2_4.