Hayabusa EUVD-2026-20767

Hayabusa is a Windows event log forensic analysis tool that ingests JSON-exported logs and generates HTML reports for investigation. The vulnerability exists in the HTML report template generation code (CWE-79: Improper Neutralization of Input During Web Page Generation), where user-controllable input from the Computer field in JSON logs is not properly sanitized or encoded before being inserted into the HTML output. An attacker who can influence the JSON log data (e.g., via log injection, lateral movement in a Windows environment, or supply of malicious forensic samples) can embed JavaScript payloads that persist in the generated HTML artifact. When a forensic examiner opens the report in a browser, the unescaped JavaScript executes in their security context, potentially accessing session tokens, exfiltrating analysis data, or pivoting to the examiner's workstation.