CVE-2026-65446Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-27: 2Technical Details · 2026-07-27: 207-27
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms &lt;= 2.4.18 versions. https://www.cve.org/CVERecord?id=CVE-2026-65446 ----- Traducción: CVE-2026-65446 XSS entre sitios no autenticado en Kali Forms &lt;= 2.4.18 versiones. https://www.cve.org/CVERecord?id=CVE-2026-65446 Fuen… http://infoflow.cloud`

    Post summary

    The post announces the CVE-2026-65446, describing it as an unauthenticated XSS in Kali Forms, but does not provide any PoC, exploit, patch, or active exploitation details.

    0000030
    95 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms &lt;= 2.4.18 versions. https://www.cve.org/CVERecord?id=CVE-2026-65446

    Post summary

    The CVE record indicates an unauthenticated XSS vulnerability in Kali Forms up to 2.4.18, but provides no PoC, exploit, patch, or active exploitation details.

    000001.0K
    57.9K followersView on X

Explore more