Threats Tagged 'cve-2026-44977'
View all threats tagged with 'cve-2026-44977'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-44977'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-44977 is a critical cross-site scripting (XSS) vulnerability in the countly-server component of Countly, a product analytics solution. The flaw exists in the star-rating plugin's API and frontend, where a non-global application administrator can upload attacker-controlled active content with a trusted MIME type. This content is then served with the attacker-influenced Content-Type to global administrators, allowing execution of malicious payloads in the Countly origin. This can expose authenticated session tokens such as auth_token and csrf_token. The vulnerability is fixed in versions 24.05.50 and 25.03.44. Join the discussion | CVE Database V5 | 10/16/2026, 16:04:45 UTC Added: 10/16/2026, 16:20:48 UTC |
Showing 1 to 1 of 1 result