CVE-2026-93514

HighCVSS 7.1/10Last modified Sep 30, 2026

Description

Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2026
Last modified
Sep 30, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-93525.3A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_env of the file toolsCVE-2026-935267.1Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions.CVE-2026-935278.5Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.CVE-2026-935283.7The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allCVE-2026-935296.5Contributor Broken Access Control in WSP MCP &#8211; AI Agents Connector <= 2.7.0 versions.CVE-2026-93537.3A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/sCVE-2026-935314.3A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects CVE-2026-935326.3A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affeCVE-2026-935336.3A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::chCVE-2026-935346.3A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdateCVE-2026-935356.4The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CVE-2026-935376.5A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permi
CVE-2026-93514: High severity, CVSS 7.1 | Vulnix