CyberRota
← Ana sayfaya dön

CVE-2026-40472

CRITICAL · CVSS 9.9 EPSS %0.05

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-23T16:16:25.753 · Çekilme zamanı: 2026-05-23T12:00:26.724588+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-40472
Severity
CRITICAL
CVSS
9.9
EPSS
%0.05

Orijinal NVD Açıklaması

In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting (XSS) attacks.