Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
⚡ New CVE Alert: CVE-2026-42615 📊 Severity: 7.2 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42615 #CVE-2026-42615 #CVE #High #CyberSecurity #InfoSec https://t.co/LC0B359wHf
Post summary
The tweet announces CVE-2026-42615 with a severity of 7.2 and high risk level, but provides no technical or exploit details.
CVE-2026-42615 GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring. https://www.cve.org/CVERecord?id=CVE-2026-42615
Post summary
A PoC demonstrates an XSS flaw in GCHQ CyberChef before version 11.0.0 using a malicious recipe; the CVE is confirmed but no active exploitation or patch information is provided.
CVE-2026-42615 Cross-Site Scripting in GCHQ CyberChef Before 11.0.0 via Show Base64 Offsets https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42615
Post summary
CVE-2026-42615 announces a Cross‑Site Scripting vulnerability in GCHQ CyberChef versions prior to 11.0.0, triggered through the Show Base64 Offsets feature.