Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-79718

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-d

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HiddenLayer

Description

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netron Netron

Default version status: unaffected

  • * to ≤ 9.1.2affected

References