Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-17 | 1 | Disclosure1 |
| 2026-08-20 | 2 | Disclosure2 |
CVE-2026-71368 F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performe… https://www.cve.org/CVERecord?id=CVE-2026-71368
Post summary
The post announces a new XSS flaw (CVE-2026‑71368) in F‑RevoCRM, detailing the attack vector but offering no proof‑of‑concept, exploit, patch, or evidence of current exploitation.
🚨*CVE* CVE-2026-71368 F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performe… https://www.cve.org/CVERecord?id=CVE-2026-71368 ----- Traducción: CVE-2026-71368 F-R… https://infoflow.cloud`
Post summary
The post announces CVE‑2026‑71368, a cross‑site scripting vulnerability in F‑RevoCRM that could allow unintended operations when users view crafted pages while logged in.
CyberSec Daily ✓ · 🌐 Vulnerability · August 17, 2026 🎯 New F-RevoCRM XSS vulnerability disclosed — CVE-2026-71368 Japan Vulnerability Notes has disclosed a cross-site scripting vulnerability affecting F-RevoCRM versions 7.3.0 through 8.0.3. Tracked as CVE-2026-71368, the flaw carries a CVSS v3 score of 6.1. According to JVN, a logged-in user who accesses a specially crafted page could be induced into performing unintended actions. Users are advised to upgrade to the latest available release. 🔗 Source: JVN / JPCERT/CC / IPA #CVE202671368 #XSS #CRM #AppSec #CyberSecurity #Vulnerability #PatchManagement
Post summary
A cross‑site scripting vulnerability (CVE‑2026‑71368) affecting F‑RevoCRM versions 7.3.0–8.0.3 has been disclosed with a CVSS score of 6.1, and users are urged to upgrade to the latest release.