EUVD-2026-117794

Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox...