CVE-2026-119274 · Infrastructure
NO FIX YET
NIOS has a stored cross-site scripting flaw in its Global Smart Folders feature. An attacker who can inject a malicious script there can run it in the browser of anyone who views the folder.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
No product ranges from the sources yet.
Who cares infoblox, nios
Unknown from the sources.
No fix yet, per the sources.
Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.