Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2026-11859

HTML injection in the Canarytoken links email

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ThinkstAppliedResearch

Description

An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails. This issue affects Canarytokens: from Docker tag sha-c0f3cf142 before sha-08c3f93d, from Git commit c0f3cf142 before 08c3f93d.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Thinkst Applied Research Canarytokens

Default version status: unaffected

  • sha-c0f3cf142 to < sha-08c3f93daffected
  • c0f3cf142 to < 08c3f93daffected

References