CVE-2026-106701
MEDIUMCVSS 6.1/10EPSS 0.19%
Last modified
CVE-2026-106701 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-106701?
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
How severe is CVE-2026-106701?
CVE-2026-106701 has a CVSS score of 6.1/10 (MEDIUM severity). The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2026-106701?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-106676qiujie mall-server 0.0.1-SNAPSHOT contains an integer overfl…
- CVE-2026-106677Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR i…
- CVE-2026-10668The Nuvoton NuMaker HSUSBD USB device-controller driver (dri…4.6
- CVE-2026-10669On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERS…7.8
- CVE-2026-10670The CONFIG_USERSPACE verification handler for the k_thread_n…5.5
- CVE-2026-106700ELADMIN v2.7 and earlier contains an improper access control…8.8
- CVE-2026-106705ELADMIN (eladmin-mp) up to 2.7 contains an improper access c…8.8
- CVE-2026-106706XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross…5.4
- CVE-2026-106707XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Script…5.4
- CVE-2026-106708XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Req…8.8
- CVE-2026-10671In Zephyr's kernel pipe implementation, the userspace syscal…7.1
- CVE-2026-10672subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmwar…9.1
Are you affected by CVE-2026-106701?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST