CVE-2026-113712

Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover. Commits 57b44a8bac0b250b0d5751e93e0349070d14606e and 23adbb88ffa819f92be4a905ff1d812670d980a2 in `cachethq/core` patch the issue.

• CWE-79

• https://github.com/cachethq/cachet/security/advisories/GHSA-x397-5hrv-j9m9
• https://github.com/cachethq/core/commit/23adbb88ffa819f92be4a905ff1d812670d980a2
• https://github.com/cachethq/core/commit/57b44a8bac0b250b0d5751e93e0349070d14606e

Published

Oct 20, 2026

Last Modified

Oct 20, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-113707A security flaw has been discovered in a2aproject a2a-rs up …5.4
• CVE-2026-113708Argo CD is a declarative, GitOps continuous delivery tool fo…9.9
• CVE-2026-113709Argo CD is a declarative, GitOps continuous delivery tool fo…9.9
• CVE-2026-11371The BetterDocs WordPress plugin before 4.5.5 does not sanit…6.1
• CVE-2026-113710ApostropheCMS is an open-source Node.js content management s…5.9
• CVE-2026-113711ApostropheCMS is an open-source Node.js content management s…7.5
• CVE-2026-113713virtualenv is a tool for creating isolated virtual python en…4.4
• CVE-2026-113714virtualenv is a tool for creating isolated virtual python en…2.3
• CVE-2026-113715virtualenv is a tool for creating isolated virtual python en…2
• CVE-2026-113716virtualenv is a tool for creating isolated virtual python en…4.5
• CVE-2026-113717virtualenv is a tool for creating isolated virtual python en…2.3
• CVE-2026-113718virtualenv is a tool for creating isolated virtual python en…7.1