CVE-2026-15639

EUVD-2026-80068 CRITICAL

Cross-site Scripting (XSS) (CWE-79)

2026-09-16 1443cd92-d354-46d2-9290-d812316ca43a

GHSA-5jwp-q2ph-6mgc

XSS

9.3

CVSS 4.0 · Vendor: 1443cd92-d354-46d2-9290-d812316ca43a

Severity by source

Vendor (1443cd92-d354-46d2-9290-d812316ca43a) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (1443cd92-d354-46d2-9290-d812316ca43a) · only source for this CVE.

CVSS VectorVendor: 1443cd92-d354-46d2-9290-d812316ca43a

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Sep 16, 2026 - 00:35 vuln.today

CVE Published

Sep 16, 2026 - 00:17 cve.org

CRITICAL 9.3

DescriptionCVE.org

An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.

AnalysisAI

We need answer as JSON only. Need synthesize data. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2020-3580 MEDIUM POC

6.1

CVE-2013-7389 MEDIUM POC

4.3

CVE-2021-25299 MEDIUM POC

6.1

CVE-2014-2120 MEDIUM

6.1

CVE-2023-40000 HIGH POC

8.3

CVE-2016-8581 MEDIUM POC

6.1

CVE-2013-5223 MEDIUM POC

5.4

CVE-2025-52367 MEDIUM POC

5.4

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

9.8