SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-65440

HIGH · CVSS 7.1 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

GetGenie versions up to 4.4.3 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts that can execute in the context of a user's browser. This vulnerability poses a significant risk as it can lead to data theft, session hijacking, and other malicious activities. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.

CVE
CVE-2026-65440
Severity
HIGH
CVSS
7.1
EPSS
0.14%

Original NVD Description

Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.