Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view (getTabContents action), allowing an attacker to inject arbitrary HTML content into the dashboard interface. The injected content is rendered in the victim's browser
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-26460 A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid param… https://www.cve.org/CVERecord?id=CVE-2026-26460
Post summary
A CVE (CVE-2026-26460) has been announced for Vtiger CRM 8.4.0, detailing an HTML Injection flaw in its Dashboard module that fails to sanitize the tabid parameter.
CVE-2026-26460 HTML Injection in Vtiger CRM 8.4.0 Dashboard Module DashB... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26460 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces an HTML Injection vulnerability (CVE‑2026‑26460) in Vtiger CRM 8.4.0’s dashboard module and provides a link to Vulmon for further details.