SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-50771

MEDIUM · CVSS 6.1 EPSS 0.22% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-17 · Last synced 2026-09-16

CyberRota Analysis

AI-Generated

A Cross Site Scripting vulnerability in Squirro Cognitive Search versions prior to 3.14.2 allows remote attackers to execute arbitrary code through the Email Notification, Create Evaluation Sets, and HTML Editor functions. This could lead to unauthorized actions or data exposure, making it critical for organizations using affected versions to prioritize patching. Users of Squirro Cognitive Search should assess their systems and update to the latest version to mitigate potential risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-50771
Severity
MEDIUM
CVSS
6.1
EPSS
0.22%

Original NVD Description

Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.