CVE-2026-116385
Last modified
CVE-2026-116385 is a low-severity vulnerability rated 3.5/10 on the CVSS scale. A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile.
Description
A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile. The manipulation of the argument first_name/last_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Bdtask | Garage 24 Garage Management Software | 1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-116385?
How severe is CVE-2026-116385?
How do I fix CVE-2026-116385?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11637Use after free in Views in Google Chrome on Mac prior to 149…8.8
- CVE-2026-116370A security flaw has been discovered in 2K Games Sid Meier's …9.6
- CVE-2026-116371A weakness has been identified in Akuvox Akubela HyPanel PS5…6.3
- CVE-2026-116372MISP mispguard is a security filtering proxy that inspects a…7.7
- CVE-2026-11638Use after free in Printing in Google Chrome prior to 149.0.7…9.6
- CVE-2026-116384A weakness has been identified in Bdtask Garage 24 Garage Ma…6.3
- CVE-2026-116386Unauthenticated Privilege Escalation in SMS Alert Order Noti…9.8
- CVE-2026-116387Missing Authorization vulnerability in Brainstorm Force Sure…5.3
- CVE-2026-116388Missing Authorization vulnerability in TMS Amelia ameliabook…5.3
- CVE-2026-116389Deserialization of Untrusted Data vulnerability in crossi72 …8.8
- CVE-2026-11639Use after free in Compositing in Google Chrome on Mac prior …7.5
- CVE-2026-116390Deserialization of Untrusted Data vulnerability in stepasyuk…7.2
Are you affected by CVE-2026-116385?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST