Threat database

CVE-2026-62064 is a high-severity Cross-Site Scripting (XSS) vulnerability affecting Bracketweb Ambed versions up to and including 1.0.0. This vulnerability allows unauthenticated attackers to inject malicious scripts during web page generation, potentially impacting confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.

CVE-2026-93951 is a reflected cross-site scripting (XSS) vulnerability in Bracketweb Zeinet versions up to and including 1.0.0. This flaw involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability has a high severity rating with a CVSS score of 7.1. No patch or official fix information is currently provided. Exploitation requires user interaction and can impact confidentiality, integrity, and availability of the affected system.

CVE-2026-94060 is a reflected cross-site scripting (XSS) vulnerability in Bracketweb Voldor versions up to and including 1.0.0. It arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 7.1. No patch or remediation information is provided in the available data.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflected XSS.This issue affects Ogency: from n/a through 1.0.0.

CVE-2026-94058 is a reflected cross-site scripting (XSS) vulnerability in Bracketweb Treck versions up to and including 1.0.0. This flaw arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability has a high severity rating with a CVSS score of 7.1. No patch or remediation information is provided in the available data.

Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.