NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-123765

CVSS: —
EPSS: —
Published: —
Modified: —

Analyze CVE-2026-123765 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

NVD CVE.org GitHub PoCs EPSS (—)

In the news

1 story

Apache Sling XSS before 2.4.14 allows XSS via getStyleToken (CVE-2026-123765)

xssAPI.getStyleToken() accepts markup in unquoted URLs; Apache rates it low and fixes it in 2.4.14.

oss-security17:23 UTC · 3h agoVulnerabilityCVE-2026-123765

32