Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HTML injection vulnerability in NICE Chat. This vulnerability allows an attacker to inject and render arbitrary HTML content in email transcripts by modifying the 'firstName' and 'lastName' parameters during a chat session. The injected HTML is included in the body of the email sent by the system, which could enable phishing attacks, impersonation, or credential theft.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
⚠️#INCIBEaviso | Inyección HTML en #NICE Chat #CVE #CVE-2025-59902 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-html-en-nice-chat #AvisosDeSeguridad #TI #CNA #0day https://t.co/3afz0cuFZn
Post summary
The tweet announces a new CVE‑2025‑59902 for HTML injection in NICE Chat and links to an INCIBE advisory, but offers no PoC, exploit code, active exploitation evidence, or patch information.
CVE-2025-59902 HTML Injection in NICE Chat Enables Arbitrary Content Rendering in Email Transcripts https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-59902
Post summary
The post announces CVE‑2025‑59902, describing an HTML injection flaw in NICE Chat that allows arbitrary content rendering in email transcripts, and links to Vulmon for further details.