CVE-2026-66771

CVE-2026-66771 concerns a cross-site scripting vulnerability in SAPUI5. A key user with content-adaptation privileges can inject malicious script into persisted application changes; when another user opens the adapted app, the script runs in the victim’s browser session. The impact is limited to ...

PT-2026-70815

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description Adobe Commerce is affected by a stored Cross-Site Scripting XSS issue, where a...

PT-2026-70745

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an unauthorized attacker to perform spoofing over a network...

PT-2026-70601

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70353

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A Cross-site Scripting XSS flaw allows for arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically...

PT-2026-70043

Name of the Vulnerable Software and Affected Versions SAPUI5 affected versions not specified Description SAPUI5 contains a Cross Site Scripting XSS flaw where a key user with content adaptation privileges can inject malicious script content into persisted application changes. This script executes...

PT-2026-70628

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70779

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to elevate privileges over a network...

RHEL 9 : opentelemetry-collector (RHSA-2026:53415)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53415 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

PT-2026-70648

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70643

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...

PT-2026-70630

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70395

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

KLA91210 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete lis...

PT-2026-70665

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. This...

PT-2026-70565

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70253

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

PT-2026-70205

Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend interpolates unescaped into class and style attributes when...

PT-2026-70625

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...