CVE-2026-53472

creationtimestamp| type| source ---|---|--- 2026-08-14 15:11:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bx2okyyvpee76...

CVE-2026-53472 Migration-planner: credentialurl validator accepts javascript: urls

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...