CVE-2026-108942

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function create_html_for_item of the file modules/ui_extra_networks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description results in cross site scripting. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. All versions in the repository are affected, as the codebase is based on AUTOMATIC1111/stable-diffusion-webui v1.7.0 code. Upstream AUTOMATIC1111/stable-diffusion-webui (v1.8.0, released March 1, 2024) contains the fix. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/philz1337x/clarity-upscaler/
• https://github.com/philz1337x/clarity-upscaler/issues/72
• https://vuldb.com/cve/CVE-2026-108942
• https://vuldb.com/submit/997640
• https://vuldb.com/vuln/416767
• https://vuldb.com/vuln/416767/cti

Published

Oct 13, 2026

Last Modified

Oct 13, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108937A vulnerability was detected in code-projects Online Ticket …5.3
• CVE-2026-108938A flaw has been found in code-projects Matrimonial System 1.…5.3
• CVE-2026-108939A vulnerability has been found in EricLBuehler mistral.rs up…5.3
• CVE-2026-10894Use after free in Printing in Google Chrome on Linux prior t…8.3
• CVE-2026-108940A vulnerability was found in EricLBuehler Mistral.rs up to 0…6.5
• CVE-2026-108941A vulnerability was identified in Linketic CityGaussian up t…4.8
• CVE-2026-108943A weakness has been identified in ModelTC LightX2V up to 0.5…5.3
• CVE-2026-108944A security vulnerability has been detected in repository RAE…4.8
• CVE-2026-108945A vulnerability was detected in iMoonLab yolov13 up to 73289…5.3
• CVE-2026-108947A flaw has been found in yoshitomo-matsubara torchdistill up…5.3
• CVE-2026-108948A vulnerability has been found in code-projects Online Revie…5.4
• CVE-2026-10895Use after free in Ozone in Google Chrome prior to 149.0.7827…8.8