MEDIUMCVSS 6.1Vulnerability

CVE-2026-9646

A reflected cross-site scripting issue exists in URL handling.

Properties

severity
MEDIUM
cvss_severity
MEDIUM
cvss_score
6.1
epss_score
0.00256
retrieved_at
2026-10-01T19:14:54+00:00
last_source
FIRST EPSS
score
6.1
cve_id
CVE-2026-9646
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
signal_observed_at
2026-09-11T17:55:57+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
published_at
2026-05-28T21:16:35.087
last_modified
2026-08-17T15:35:47.203
epss_percentile
0.15591

Related Entities (4)

ENRICHED_BY (1)

→[Source]FIRST EPSS

HAS_WEAKNESS (1)

→[Weakness]Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

DESCRIBED_BY (1)

→[Source]NVD

AFFECTS_PRODUCT (1)

→[Product]

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-9646 (CVSS 6.1) — Ninja Signal Threat Intelligence | Ninja Signal