VulnSocial

CVE-2026-44960Disclosure

LOWCVSS 0.0 · NONE

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious JavaScript payload embedded in the username would be executed due to missing output sanitisation. Proper escaping has been added to the audit log details output.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-23: 2Technical Details · 2026-06-23: 206-23
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-44960 A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious Jav… https://www.cve.org/CVERecord?id=CVE-2026-44960 ----- Traducción: CVE-2026-44960 Un … http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑44960 as a stored XSS that exploits usernames when an admin views audit logs, without mentioning any PoC, exploitation, patch, or false‑positive claim.

    00000217
    88 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-44960 A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious Jav… https://www.cve.org/CVERecord?id=CVE-2026-44960

    Post summary

    CVE-2026-44960 is a stored XSS vulnerability that can be triggered using usernames in audit log views; the post provides technical details but no PoC, patch, or evidence of active exploitation.

    00000929
    57.7K followersView on X

Explore more

Back to dashboard