CVE-2026-35466

—

CVSS 3.1

6.1 medium

EPSS

<1%p10

Published

Apr 2, 2026 (Apr 2, 2026)

Modified

Jul 24, 2026

Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Vendors: cmu
Products: cveclient
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.