CVE-2026-18516
CVE-2026-18516 · Improper Encoding or Escaping of Output in Crafty Controller
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection
CVSS 9.6 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
crafty controller
- Versions
- ≥ 0, ≤ 4.10.8: Affected (semver)
No fix published