{"id":"CVE-2026-127285","kind":"vulnerability","aliases":["CVE-2026-127285"],"related":[],"title":"Cairo-Dock Glx-Dock 3.4.0: cross-site scripting via bg_forum.php argument","description":"A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function of the file bg_forum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"A flaw in the bg_forum.php file of Cairo-Dock Glx-Dock 3.4.0 lets a remote attacker inject script through the f argument. A public exploit exists, and the vendor did not respond to disclosure.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cairo-dock","glx-dock","other","web"],"not_affected_if":["glx-dock-not-installed"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T03:17:29+00:00","first_seen_at":"2026-11-13T03:42:55+00:00","triaged_at":"2026-11-13T03:43:21+00:00","updated_at":"2026-11-13T03:43:21+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-13T03:43:21Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Cairo-Dock Glx-Dock 3.4.0: cross-site scripting via bg_forum.php argument","impact":"low","summary":"A flaw in the bg_forum.php file of Cairo-Dock Glx-Dock 3.4.0 lets a remote attacker inject script through the f argument. A public exploit exists, and the vendor did not respond to disclosure.","audience":"businesses","category":"other","nicknames":[],"who_cares":["glx-dock","cairo-dock","web"],"confidence":0.5,"fix_status":"none","needs_auth":"unknown","worst_case":"Attacker script runs in a victim's browser session on the site","analyst_note":"Confirm which deployments serve bg_forum.php and whether the vendor or a patch has since appeared; check https://nvd.nist.gov/vuln/detail/CVE-2026-127285.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["glx-dock-not-installed"],"who_is_affected":"Sites or tools that run Glx-Dock 3.4.0 with a bg_forum.php page reachable from the network are the exposed systems. The sources do not say which deployments serve that file by default. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000706,"input_tokens":4572,"output_tokens":497,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-127285':17A,20A '-2026':16A,19A '3.4.0':7A,42B,77C 'affect':79C 'argument':14A,52B,99C 'attack':46B,106C 'attribut':93C 'bg_forum.php':13A,33B,88C 'cairo':2A,22B,37B,72C 'cairo-dock':1A,21B,36B,71C 'caus':101C 'compon':91C 'contact':123C 'cross':9A,102C 'cross-sit':8A 'cve':15A,18A 'disclosur':64B,127C 'dock':3A,6A,23B,26B,38B,41B,73C,76C 'earli':124C 'element':80C 'exist':56B 'exploit':55B,112C 'f':51B,100C 'file':34B,87C 'flaw':30B,66C 'found':69C 'function':84C 'glx':5A,25B,40B,75C 'glx-dock':4A,24B,39B,74C 'handler':94C 'href':92C 'initi':109C 'inject':47B 'let':43B 'manipul':96C 'may':107C,117C 'public':54B 'publish':115C 'remot':45B,110C 'respond':62B,131C 'script':11A,48B,104C 'site':10A,103C 'unknown':83C 'use':119C 'vendor':59B,121C 'via':12A 'way':134C 'web':28B","nicknames":[],"mitigations":[],"who_affected":"Sites or tools that run Glx-Dock 3.4.0 with a bg_forum.php page reachable from the network are the exposed systems. The sources do not say which deployments serve that file by default. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cairodock","glxdock","medium","other","web"],"campaign_type":null,"search_a":"'-127285':17A,20A '-2026':16A,19A '3.4.0':7A 'argument':14A 'bg_forum.php':13A 'cairo':2A 'cairo-dock':1A 'cross':9A 'cross-sit':8A 'cve':15A,18A 'dock':3A,6A 'glx':5A 'glx-dock':4A 'script':11A 'site':10A 'via':12A","search_b":"'3.4.0':42B 'argument':52B 'attack':46B 'bg_forum.php':33B 'cairo':22B,37B 'cairo-dock':21B,36B 'disclosur':64B 'dock':23B,26B,38B,41B 'exist':56B 'exploit':55B 'f':51B 'file':34B 'flaw':30B 'glx':25B,40B 'glx-dock':24B,39B 'inject':47B 'let':43B 'public':54B 'remot':45B 'respond':62B 'script':48B 'vendor':59B 'web':28B","search_c":"'3.4.0':77C 'affect':79C 'argument':99C 'attack':106C 'attribut':93C 'bg_forum.php':88C 'cairo':72C 'cairo-dock':71C 'caus':101C 'compon':91C 'contact':123C 'cross':102C 'disclosur':127C 'dock':73C,76C 'earli':124C 'element':80C 'exploit':112C 'f':100C 'file':87C 'flaw':66C 'found':69C 'function':84C 'glx':75C 'glx-dock':74C 'handler':94C 'href':92C 'initi':109C 'manipul':96C 'may':107C,117C 'publish':115C 'remot':110C 'respond':131C 'script':104C 'site':103C 'unknown':83C 'use':119C 'vendor':121C 'way':134C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T03:17:29+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-127285","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-127285","severity":null,"published_at":"2026-11-13T03:17:29+00:00","modified_at":"2026-11-13T03:17:30+00:00","first_seen_at":"2026-11-13T03:42:55+00:00","fetched_at":"2026-11-13T03:42:55+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}