Threats Tagged 'cve-2026-107845'
View all threats tagged with 'cve-2026-107845'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-107845'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-107845 is a critical cross-site scripting (XSS) vulnerability in the Contao comments bundle that allows unauthenticated front end visitors to inject malicious scripts in comments. These scripts execute in the context of any back end user who opens the Comments module, without requiring any user interaction. The lack of a Content-Security-Policy header on the Contao back end allows inline script execution. This can lead to full back end compromise, including reading modules, creating administrators, or editing templates that enable code execution. Moderation does not prevent exposure and actually guarantees it since unpublished comments are still loaded by moderators. A patch is available for affected versions. Join the discussion | GCVE Database | 10/09/2026, 20:53:50 UTC Added: 10/09/2026, 22:44:19 UTC |
Showing 1 to 1 of 1 result