CVE-2026-117679: XSS
Published Nov 5, 2026
·Updated
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.
Event History
Nov 5, 2026
CVE Published
via MITRE·08:17 AM
Data Sourced
via MITRE·08:17 AM
DescriptionSeverity
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to SHIRASAGI. Exploitation also requires a user to access a website using the affected product.
2
What is the potential impact if exploitation succeeds?
An attacker may execute arbitrary script in the affected user's web browser. The provided severity vector indicates low confidentiality and integrity impact, with no availability impact.