SecNews@SecNews_GR
CVE-2026-18516: Αποθηκευμένη XSS στο Crafty Controller https://www.secnews.gr/741130/crafty-controller-cve-2026-18516-xss/?fsp_sid=19539
0000086
7.0K followersView on X
CVE-2026-18516
LOWCVSS 9.6 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-116
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day