Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_login.php'.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-26 | 2 | Disclosure1General1 |
| 2026-03-29 | 1 | Disclosure1 |
CVE-2025-41026 Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending… https://www.cve.org/CVERecord?id=CVE-2025-41026
Post summary
The post announces the reflected XSS vulnerability CVE-2025-41026 in GDTaller, noting it permits JavaScript execution in victims' browsers, while lacking details on PoC, exploit, or patch.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-41026 - Multiple vulnerabilities in GDTaller Intel Report: https://ift.tt/JPaEpcu
Post summary
A brief alert announcing CVE‑2025‑41026 with a link to an intel report, but lacking specific technical details or actionable information.
⚠️#INCIBEaviso | Múltiples vulnerabilidades en #GDTaller #CVE CVE-2025-41026 y CVE-2025-41027 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-gdtaller #AvisosDeSeguridad #TI #CNA
Post summary
The alert announces the discovery of two vulnerabilities (CVE-2025-41026 and CVE-2025-41027) in GDTaller, but no Proof of Concept, exploit code, active exploitation, or patch details are mentioned in the brief text.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gdtaller | gdtaller | - | - | - |