Live › vulnerability › CVE-2026-113442
Go to dashboardValues typed by visitors were inserted into the HTML summary email without escaping. An unauthenticated attacker can inject HTML that renders in the email shown to the recipient.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient.
This page as .md · .json · in your agent: get_signal("CVE-2026-113442")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.