VulnSocial

CVE-2026-26377Disclosure(koha / koha)

LOWCVSS 5.4 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.

koha CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • koha

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-03-08)
  • 3 total mentions across 2 days

Affected systems

Vendors
koha
Products
koha

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-06: 1Mentions · 2026-03-08: 2Technical Details · 2026-03-06: 1Technical Details · 2026-03-08: 203-0603-08
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-061
Disclosure1
2026-03-082
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-26377 Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function. https://www.cve.org/CVERecord?id=CVE-2026-26377 ----- Traducción: CVE-2026-26377 Vulnerabilidad de Cross-Site Scripting… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑26377, a Cross‑Site Scripting flaw in Koha 25.11 and earlier that lets remote attackers execute arbitrary code via the News function.

    0000039
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26377 Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function. https://www.cve.org/CVERecord?id=CVE-2026-26377

    Post summary

    The post announces CVE‑2026‑26377, a Cross Site Scripting vulnerability in Koha 25.11 and earlier that permits remote code execution via the News function, but it provides no PoC, exploit details, or patch information.

    00000345
    56.6K followersView on X
  • DailyCVE@dailycve
    Disclosure

    🟠 Koha, Cross-Site Scripting, #CVE-2026-26377 (Medium) https://dailycve.com/koha-cross-site-scripting-cve-2026-26377-medium/

    Post summary

    The tweet announces a medium‑severity Cross‑Site Scripting vulnerability in Koha (CVE‑2026‑26377) and links to a DailyCVE article, with no PoC, exploit, or patch information disclosed.

    0000040
    164 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appkohakoha---

Explore more

Back to dashboardkoha CVEskoha vulnerabilities