Threats Tagged 'cve-2026-90443'
View all threats tagged with 'cve-2026-90443'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-90443'
Click on any threat for detailed analysis and mitigation recommendations
This vulnerability involves a web interface that reflects part of the request URL into a script context and a hyperlink attribute without proper encoding. It does not require authentication to access, allowing unauthenticated attackers to craft malicious links. When a user visits such a link, arbitrary scripts can execute in the context of the affected application, and the user's browser can be redirected to external sites. Exploitation could enable attackers to act with the user's session privileges within the application. Join the discussion | GCVE Database | 09/12/2026, 00:31:28 UTC Added: 09/12/2026, 02:06:04 UTC |
0 A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This allows an unauthenticated network attacker to craft a link that, when visited by a user, executes arbitrary script in the context of the affected application and can redirect the user's browser to an arbitrary external site. Successful exploitation could allow an attacker to act with the compromised user's session privileges within the application. Join the discussion | CVE Database V5 | 09/11/2026, 21:45:27 UTC Added: 09/11/2026, 22:02:29 UTC |
Showing 1 to 2 of 2 results