CVE-2026-106701: XSS
Published Oct 15, 2026
·Updated
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
Affected Software
1 affected component
eladmin eladmin<=2.7
Event History
Oct 15, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are affected?
ELADMIN v2.7 and earlier are identified as affected. The available data does not state whether any particular deployment configuration changes exposure.
2
What access does an attacker need?
The vector is network-based and the attacker does not need prior privileges or authentication. Exploitation requires user interaction.
3
What is the potential impact?
Successful exploitation may allow disclosure or modification of information in the context affected by the XSS issue. The vulnerability is rated medium severity with a 6.1 CVSS score.