CVE-2026-21855criticalCWE-79

CVE-2026-21855: falha crítica em the-hideout tarkov-data-manager

Tarkov Data Manager has Unauthenticated Reflected XSS

Publicada em

Seguir esta CVE+ Monitorar tarkov-data-manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.2%
The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting (XSS) vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by crafting a malicious URL. A series of fix commits on 02 January 2025 fixed this and other vulnerabilities.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Produtos afetados
the-hideout · tarkov-data-manager
CVEs relacionadas — the-hideout tarkov-data-manager

No mesmo produto, das mais perigosas para as menos.

CVE-2026-21854CRITICALTarkov Data Manager Authentication Bypass vulnerabilityEPSS 0.5%CVE-2026-21856HIGHTarkov Data Manager has Authenticated SQL InjectionEPSS 0.4%