CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 15:27 UTC
  • Importiert: 2026-08-26 15:51 UTC
  • Quelle-ID: full_disc
  • uid_hash: 0bed9a405693abbc454b6db03f818c87b955570f95852eef41de357755a0b424
Full Disclosure

Inhalt

Posted by Intilangelo, Andrea on Aug 26 Two stored XSS vulnerabilities have been disclosed in the NethServer WebTop module, affecting versions 1.5.6 and

earlier.

CVE-2026-78331 (CVSS 4.0: 8.7) affects the calendar component, while CVE-2026-78332 (CVSS 4.0: 8.2) affects the

contacts component.

Both vulnerabilities allow malicious content to be stored and JavaScript code to be executed when the affected calendar

event or contact is viewed by another user.

Affected versions:

WebTop...

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-78331

CVE-2026-78332

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste