Beveiligingsadvies

CVE-2026-86550

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-08 08:14:25

Laatst bijgewerkt 2026-09-08 12:24:02

Toegewezen door zte

CVSS-score 6.5

Status PUBLISHED

Beschrijving

NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirects. This results in a universal cross‑site scripting (UXSS) vulnerability that enables script execution within the origin of arbitrary websites.

← Alle CVE's bekijken Bekijk op cve.org ↗