Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cross-site Scripting vulnerability was located in versions prior to 35.8.3, 38.5.4, and 39.3.1 in the rendering of the ExceptionMessage of the WebUI 500 error which could allow attackers to steal login session tokens of users who navigate to a specially crafted URL. Versions 35.8.3, 38.5.4, and 39.3.1 fix the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 1 | Disclosure1 |
| 2026-02-26 | 1 | General1 |
CVE-2026-25136 Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. A reflected Cr… https://www.cve.org/CVERecord?id=CVE-2026-25136
Post summary
The text references CVE‑2026‑25136 and hints at a reflected cross‑site scripting flaw, but offers no further details, PoC, or actionable information.
**CVE-2026-25136** is a reflected Cross-site Scripting (XSS) vulnerability found in Rucio versions prior to 35.8.3, 38.5.4, and 39.3.1. The flaw resides specifically in the rendering of the `ExceptionMessage` component within the WebUI's 500 error pages. When a user encounters a server error, the message displayed can be manipulated through specially crafted URLs, leading to the execution of malicious scripts in the context of the affected user's browser. #Cybersecurity #CVE #HighSeverity #SecurityAlert #XSS https://cvetodo.com/cve/CVE-2026-25136
Post summary
This post discloses a reflected XSS flaw in Rucio's ExceptionMessage rendering that permits malicious script execution via crafted URLs in old versions.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cern | rucio | - | - | - |