CVE-2026-54855 is an unauthenticated cross-site scripting (XSS) vulnerability affecting Profile Builder versions up to and including 4.0.5. This vulnerability allows attackers to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability.