CVE-2026-35466

A Stored Cross-Site Scripting (XSS) vulnerability exists in the cveInterface.js component of cveClient , an open-source browser-based CVE record management client developed by the CERT Coordination Center (CERT/CC) . The root cause is that the application trusts input provided by CVE API services...

CVE-2026-35467

The cveClient open-source browser-based CVE record management client, developed by the CERT Coordination Center (CERT/CC), contains a security vulnerability where API keys stored in the temporary browser client are not marked as protected. This oversight allows for the extraction of encryption cr...