CVE-2026-9646 | THREATINT

Description

A reflected cross-site scripting issue exists in URL handling.

PUBLISHED Reserved 2026-05-26 | Published 2026-05-28 | Updated 2026-05-28 | Assigner tenable

MEDIUM: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Problem types

CWE-80 Improper neutralization of Script-Related HTML tags in a web page (basic XSS)

Product status

Default status
unaffected

1.2.0 (semver)
affected

Credits

Derrie Sutton with Tenable finder

References

www.tenable.com/security/research/tra-2026-46

cve.org (CVE-2026-9646)

nvd.nist.gov (CVE-2026-9646)

Download JSON