SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-65448

MEDIUM · CVSS 6.5 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated cross-site scripting (XSS) in AcyChecker versions up to 1.8.1, potentially enabling attackers to execute arbitrary scripts in the context of a user's session. This could lead to data theft or session hijacking, impacting users who interact with the affected application. Organizations using AcyChecker should prioritize patching this issue to mitigate the risk of exploitation.

CVE
CVE-2026-65448
Severity
MEDIUM
CVSS
6.5
EPSS
0.13%

Original NVD Description

Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.