CVE-2026-39823

MEDIUM · CVSS 6.1 EPSS 0.01%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-07 · Last synced: 2026-06-06

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE

CVE-2026-39823

Severity

MEDIUM

CVSS

6.1

EPSS

0.01%

Original NVD Description

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.