CVE-2026-30919highCWE-79

CVE-2026-30919: high-severity vulnerability in facileManager

facileManager Affected by Stored Cross-Site Scripting (XSS)

Published · Updated

Follow this CVE+ Monitor facileManager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6epss 0.2%
facileManager is a modular suite of web apps built with the sysadmin in mind. Prior to 6.0.4 , stored XSS (also known as persistent or second-order XSS) occurs when an application receives data from an untrusted source and includes that data in its subsequent HTTP responses in an unsafe manner. This vulnerability was found in the fmDNS module. This vulnerability is fixed in 6.0.4.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Affected products
facileManager · facileManager
Related CVEs — facileManager

In the same product, most dangerous first.

CVE-2026-30918HIGHfacileManager Affected by Reflected Cross-Site Scripting (XSS)EPSS 0.2%