CVE-2026-65022 is a cross-site scripting (XSS) vulnerability in the MDM App Catalog / App Store preview. The issue arises because user-supplied HTML is not properly sanitized or encoded before rendering, allowing injected HTML to be displayed to users. This can lead to XSS attacks when users interact with the crafted content. The vulnerability has a CVSS score of 6.3, indicating a medium severity level.