Threats Tagged 'cve-2026-26211'
View all threats tagged with 'cve-2026-26211'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-26211'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-26211 is a stored cross-site scripting (XSS) vulnerability in Creativeitem Ekushey Project Manager CRM. The system name configured by an administrator is output on the login page without proper encoding, allowing HTML and event handlers to execute in the browser of any visitor to the login page. This vulnerability requires administrator privileges to store the malicious payload but affects unauthenticated visitors who load the login page. The vulnerability persists until the system name setting is changed. Join the discussion | CVE Database V5 | 08/25/2026, 17:28:19 UTC Added: 08/25/2026, 17:37:41 UTC |
Showing 1 to 1 of 1 result