CVE-2026-35466

6.1 mediumEPSS 0.2%

Medium (6.1) in cmu cveclient. EPSS 0.2% chance of exploitation in the next 30 days.

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-04-02
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19