What is the CVSS score of EUVD-2026-97881?

EUVD-2026-97881 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.3%.

How to fix or mitigate EUVD-2026-97881?

Within 24 hours, inventory all EdgeEver 1.6.0 through 1.112.0 deployments and identify every issued API and MCP token, then immediately revoke or rotate any token that is unused, shared, over-scoped, or held by third parties; disable the template preview function and the window.edgeeverDesktop bridge wherever business workflows permit, and warn users not to open template previews from untrusted or recently modified templates. Within 7 days, enforce least privilege on all remaining API/MCP tokens, restricting them to read-only or narrowly scoped operations, segregate template authoring from template consumption so that only vetted authors can write contentMarkdown, apply a strict Content Security Policy and input sanitization on rendered template markdown, and enable centralized logging and alerting on template content changes, preview events, and anomalous bridge invocations. Within 30 days, if the vendor releases a fixed build above 1.112.0, schedule emergency change-window patching across all affected instances and verify version compliance; otherwise formally accept or re-scope the risk with compensating controls documented, accelerate migration to an alternate platform if bridge isolation cannot be achieved, and re-run a targeted review of token inventory and template permissions to confirm no residual exposure remains.

EdgeEver EUVD-2026-97881

| CVE-2026-109558 HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-10-12 disclosure@vulncheck.com

GHSA-f2xf-xr5r-qf3x

XSS

8.5

CVSS 4.0 · Vendor: vulncheck

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain API or MCP token
Delivery

Store template with HTML event handler
Exploit

Victim opens template preview
Execution

Unsanitized HTML executes script
Impact

Abuse window.edgeeverDesktop privileged bridge

Vulnerability Assessment

Weakness	CWE CWE-79 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Output encoding, context-aware escaping MITRE ATT&CK 2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires a valid EdgeEver API or MCP token with permission to write/store templates (authenticated, PR:L) and requires a user to open the affected template preview (UI:P), at which point TemplatesPane.tsx renders template contentMarkdown through dangerouslySetInnerHTML without sanitization, allowing HTML event-handler payloads to execute and reach the privileged window.edgeeverDesktop bridge. It affects EdgeEver desktop versions 1.6.0 through 1.112.0. Limiting factors that reduce realistic risk: the attacker must first obtain a template-writing token, and a victim must actively open the preview - there is no fully unauthenticated, zero-interaction path.
Impact	The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H) scores 8.5, reflecting a network-reachable, low-complexity stored XSS with high confidentiality and integrity impact but requiring low-level privileges (a valid API or MCP token) and passive user interaction (opening a preview). No EPSS score, CISA KEV listing, or public proof-of-concept was provided, so there is no public exploit identified at time of analysis - the high score is driven by potential impact (script execution reaching the privileged window.edgeeverDesktop bridge in what appears to be an Electron desktop app), not by evidence of active exploitation. The two gating conditions (PR:L authenticated token write + UI:P victim preview) meaningfully reduce real-world risk versus a fully unauthenticated, no-interaction flaw, and the affected product is an obscure open-source project with a negligible deployment footprint. Net: a legitimately high-impact bug worth patching for EdgeEver users, but not a broad-ecosystem emergency - prioritize based on whether you run EdgeEver and issue tokens to untrusted parties, not on the 8.5 alone.
Exploit ScenarioDerived	An attacker holding a valid EdgeEver API or MCP token creates a template whose contentMarkdown embeds HTML with event handlers (e.g. an onerror/onload payload). When a user opens the template preview, TemplatesPane.tsx renders the raw HTML via dangerouslySetInnerHTML without sanitization, executing attacker script in the privileged desktop renderer and exposing the window.edgeeverDesktop bridge. No public exploit code was identified; the network attack vector is low-complexity but gated by token access and the victim opening the preview.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Oct 12, 2026

Stored cross-site scripting in EdgeEver 1.6.0 through 1.112.0 allows an attacker with a valid API or MCP token to inject HTML event handlers into template contentMarkdown, which executes when a victim opens the template preview, granting access to the privileged window.edgeeverDesktop bridge. Exploitation requires a low-privileged authenticated token (PR:L) and user interaction to open the preview (UI:P), and no public exploit code has been identified at time of analysis.

RemediationAI

Upstream fix available (commit 6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca); released patched version not independently confirmed. Verify that the fix sanitizes template contentMarkdown before rendering (e.g., using DOMPurify or equivalent) and removes the use of dangerouslySetInnerHTML. Until a patched version is confirmed, restrict template write access to trusted users, avoid previewing untrusted templates, and consider enforcing a strict Content Security Policy in the Electron renderer to mitigate XSS. Monitor the vendor repository and issues 533 and 546 for updates. Advisory: https://www.vulncheck.com/advisories/edgeever-1.6.0-through-1.112.0-stored-xss-via-templatespane-template-preview.

Affected VersionsENISA

EdgeEver 1.6.0 ≤1.112.0

Affected Packages

euvd edgeever no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability resides in apps/web/src/components/TemplatesPane.tsx (lines 150-158), where template contentMarkdown is rendered with dangerouslySetInnerHTML without sanitization. This is a classic CWE-79 stored XSS: an attacker with write access to templates (via API or MCP token) can persist malicious HTML containing event handlers (e.g., onerror) that execute in the context of the EdgeEver desktop renderer when the template is previewed. Because the XSS runs in the Electron renderer, it can access the privileged window.edgeeverDesktop bridge, potentially enabling further abuse of desktop APIs. The referenced fix commit (6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca) modifies ACP host and path validation code, not the vulnerable TemplatesPane component, so the exact patch for this XSS is not evident from the provided diff; however, the commit is listed among the references.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (vulncheck) PRIMARY 8.5 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

vuln.today AI 8.7 HIGH

Token-authenticated write gives PR:L and victim preview gives UI:R; stored script escaping the web content into the privileged desktop bridge justifies S:C with high C and I, no availability impact.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

Low

User Interaction

Passive

Vulnerable system: Confidentiality

High

Vulnerable system: Integrity

High

Vulnerable system: Availability

None

Subsequent system: Confidentiality

None

Subsequent system: Integrity

None

Subsequent system: Availability

None

DescriptionCVE.org

EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.

Executive ViewAI

Why It Matters

A stored cross-site scripting vulnerability affects EdgeEver versions 1.6.0 through 1.112.0, allowing anyone holding a low-privileged API or MCP token to embed malicious content in template previews that then executes inside the privileged window.edgeeverDesktop bridge of any colleague who opens the template. Because that bridge reaches desktop-level capabilities, a single compromised or over-scoped integration token could translate into attacker control of end-user workstations and any data those users can access. No vendor-released patch is identified and no public exploit code has been identified at time of analysis, but the flaw is rated HIGH (CVSS 8.5) and requires only authenticated low-privilege access plus a routine user action.

Business Impact: High

Compensating Controls

No vendor-released patch identified at time of analysis. Interim mitigations: revoke or rotate all API/MCP tokens and enforce least privilege on remaining ones; disable or restrict the template preview feature; isolate or disable the window.edgeeverDesktop bridge where feasible; isolate template authoring from consumption and require review of contentMarkdown changes; apply a restrictive Content Security Policy and sanitize rendered markdown; monitor and alert on template modifications, preview opens, and bridge activity; segment EdgeEver hosts to limit blast radius; accelerate migration to an alternative platform if isolation cannot be achieved.

Threat Intelligence Overview

EPSS Score

0.3%

Top 76% exploitable

Prevalence

Rare

obscure open-source desktop app, negligible enterprise or production footprint

Data Quality

5 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.3%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.