OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-77166

LOW · CVSS 2.4 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-09-21 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability lies in the emoji field of the page emoji update endpoint, which fails to validate user input effectively. This flaw allows an attacker to inject excessively long text and line breaks, resulting in a broken sidebar layout that can obscure other interface elements. Organizations utilizing this endpoint should prioritize remediation to maintain user interface integrity and prevent potential usability issues.

CVE
CVE-2026-77166
Severity
LOW
CVSS
2.4
EPSS
0.28%

Original NVD Description

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.