CVE-2026-1243Disclosure(ibm / aix)

LOWCVSS 5.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aix
  • content_navigator
  • linux_kernel
  • windows

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Products
aixcontent_navigatorlinux_kernelwindows

4 versions affected across 4 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-02: 3Technical Details · 2026-04-02: 204-02
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-1243 📊 Severity: 5.4 🚨 Risk Level: Medium 🧩 Affects: Ibm Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1243 #CVE-2026-1243 #CVE #Medium #Ibm #CyberSecurity #InfoSec https://t.co/klr5dHWccr

    Post summary

    The tweet briefly announces CVE-2026-1243 with a severity rating but provides no details about exploitation, fixes, or technical attributes.

    0000037
    123 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-1243 IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code… https://www.cve.org/CVERecord?id=CVE-2026-1243

    Post summary

    The text announces that IBM Content Navigator versions are vulnerable to authenticated cross-site scripting, allowing the injection of arbitrary JavaScript.

    00000101
    56.9K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-1243 - IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability Intel Report: https://ift.tt/CTgmj38

    Post summary

    This alert announces CVE-2026-1243, an XSS vulnerability affecting IBM Content Navigator, with a link to an Intel report but no evidence of PoC, active exploitation, or patch details.

    0000047
    281 followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSibmaix---
Appibmcontent_navigator3.0.15--
Appibmcontent_navigator3.1.0--
Appibmcontent_navigator3.2.0--
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more