CVE-2026-60043 is a critical cross-site scripting (XSS) vulnerability that allows an unauthenticated remote attacker to execute malicious scripts in the context of a logged-in backend user. Exploitation can lead to execution of critical system actions such as shutting down the server or restoring backups, impacting system integrity and availability.