CVE-2026-71189
LOWCVSS 3.5/10
Last modified
CVE-2026-71189 is a low-severity vulnerability rated 3.5/10 on the CVSS scale. An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application..
Description
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Toptech Systems | TMS7 | 7.6.3 |
| Toptech Systems | TopHAT | 7.6.3 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-71189?
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
How severe is CVE-2026-71189?
CVE-2026-71189 has a CVSS score of 3.5/10 (LOW severity).
How do I fix CVE-2026-71189?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-71180Dell Update Package Framework, versions prior to 26.07.03, c…7.8
- CVE-2026-71181Dell Update Package Framework, versions prior to 26.07.03, c…6
- CVE-2026-71182Dell Update Package Framework, versions prior to 26.07.03, c…6
- CVE-2026-71183An authorization vulnerability in Apache DolphinScheduler al…7.1
- CVE-2026-71184Gitea's pull request review notifier does not attach the pul…8.8
- CVE-2026-71187The Ebyte device relies on client side authentication logic …9.8
- CVE-2026-7119A vulnerability was detected in Tenda HG3 2.0. The impacted …8.8
- CVE-2026-71190In OpenStack Swift through 2.38.0, the proxy server Accept h…8.7
- CVE-2026-71191In OpenStack Swift through 2.38.0, S3API middleware does not…6
- CVE-2026-71192In OpenStack Swift through 2.38.0, the S3API middleware does…6
- CVE-2026-71193In OpenStack Designate before 22.0.1, zone creation checks (…9.6
- CVE-2026-71194In OpenStack Designate before 22.0.2, the mDNS handler perfo…6.8
Are you affected by CVE-2026-71189?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST