CVE-2026-6179

MediumCVSS 5.4/10Last modified Oct 26, 2026

Description

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-617904.4Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a team can requirCVE-2026-617917.4OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. PriorCVE-2026-617927.7Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project adminisCVE-2026-617936.9Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** roCVE-2026-617946.8Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webCVE-2026-617956.8Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/weCVE-2026-61808.1A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditCVE-2026-618009.1Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 thrCVE-2026-618015.5The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files.CVE-2026-618026.5Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 thCVE-2026-618035.3Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, the `course/CVE-2026-618048.1myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category` management store th
CVE-2026-6179: Medium severity, CVSS 5.4 | Vulnix