MEDIUM 4.8 NVD
CVE-2026-71189
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user'
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02
- https://www.toptech.com/blog/tms7-version-7-8-strengthens-security
This medium severity vulnerability with a CVSS score of 4.8 was published on 2026-09-29 via NVD.
vulnfeed aggregates 10239 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.