VulnSocial

CVE-2026-57333Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-29); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-29: 2Mentions · 2026-06-30: 1Patch / Workaround · 2026-06-30: 1Technical Details · 2026-06-29: 2Technical Details · 2026-06-30: 106-2906-30
Signal classification1 categories
Disclosure
3100.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-292
Disclosure2
2026-06-301
Disclosure1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 HIGH Severity Alert: CVE-2026-57333 Unauthenticated XSS in Link Whisper Free ≤ v0.9.4 CVSS: 7.1 No authentication required for exploitation. Update immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/Cff9Vs9IF1

    Post summary

    The tweet alerts on an unauthenticated XSS vulnerability (CVE‑2026‑57333) in Link Whisper Free ≤0.9.4 with a CVSS of 7.1, urging users to update immediately; no PoC, exploit code, or active exploitation reports are mentioned.

    0000051
    55 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-57333 Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free &lt;= 0.9.4 versions. https://www.cve.org/CVERecord?id=CVE-2026-57333 ----- Traducción: CVE-2026-57333 XSS entre sitios no autenticado en Link Whisper Free &lt;= 0.9.4 versiones. … http://infoflow.cloud`

    Post summary

    The text announces CVE-2026-57333 as an unauthenticated XSS vulnerability affecting Link Whisper Free versions <= 0.9.4, providing a link to the official CVE record but no further technical or exploit information.

    0000034
    89 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-57333 Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free &lt;= 0.9.4 versions. https://www.cve.org/CVERecord?id=CVE-2026-57333

    Post summary

    The text announces CVE-2026-57333 as an unauthenticated XSS flaw in Link Whisper Free versions up to 0.9.4, providing a link to the CVE record but no PoC, exploit, patch, or active exploitation details.

    00000603
    57.7K followersView on X

Explore more

Back to dashboard