CVE-2026-0540

🗓️ 03 Mar 2026 23:23:52Reported by redhat.comType

CVE-2026-0540 has no description; mitigation is unavailable or fails Red Hat criteria for ease of use, deployment, wide base, and stability.

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in DOMPurify (CVE-2025-15599, CVE-2026-0540)	6 Apr 202616:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.	6 May 202608:24	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in dompurify-3.2.4.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-15599, CVE-2026-0540)	4 May 202614:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By A Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-0540]	13 May 202623:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Jun 202607:19	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site scripting, authentication bypass by spoofing, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	18 May 202616:41	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Node.js	22 Apr 202616:12	–	ibm
IBM Security Bulletins	Security Bulletin: The Log Source Management App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	1 Jun 202616:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-1605, CVE-2026-29063, CVE-2025-11143, CVE-2026-2332, CVE-2025-15599, CVE-2026-0540)	27 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: Carbon chart DOMPurify XSS Vulnerabilities (CVE-2025-15599, CVE-2026-0540)	23 Apr 202610:03	–	ibm

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-0540
github	www.github.com/cure53/DOMPurify
github	www.github.com/cure53/DOMPurify/commit/fca0a938b4261ddc9c0293a289935a9029c049f5
vulncheck	www.vulncheck.com/advisories/dompurify-xss-via-missing-rawtext-elements-in-safeforxml
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Mar 2026 20:07Current

5.3Medium risk

Vulners AI Score5.3

CVSS 45.3

CVSS 3.16.1

EPSS0.00014

SSVC

CWE-79