{"id":"CVE-2026-60043","published":"2026-11-10T09:17:24.110","lastModified":"2026-11-10T09:17:24.110","description":"An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.certvde.com/en/advisories/VDE-2026-079/","tags":[]},{"url":"https://www.certvde.com/en/advisories/VDE-2026-141/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"CVE-2026-60043 is a cross-site scripting (XSS) vulnerability in a web application that allows unauthenticated attackers to execute malicious scripts in the context of a logged-in backend user. This enables privilege escalation to perform critical system actions such as shutting down the server or restoring backups.","exploitability":"Exploitation requires social engineering to trick a logged-in backend user into visiting a malicious link or page, as the attack needs user interaction (UI:R) and cannot be performed purely remotely without victim engagement.","blast_radius":"Successful exploitation could lead to complete loss of system availability (e.g., server shutdown) and integrity (e.g., unauthorized backup restoration), potentially causing extended downtime or compromise via malicious backup content.","remediation":"Upgrade to version 2.590 or later, as this is the fixed version specified in the advisory for CVE-2026-60043.","detection":"Defenders should monitor backend web server access logs for anomalous GET/POST requests containing script-like payloads (e.g., <script>, javascript:, onerror=) in query parameters or form fields, especially when originating from unauthenticated sessions targeting admin or backend endpoints. Additionally, inspect browser console errors or CSP violation reports if Content Security Policy is enforced.","tags":["xss","privilege-escalation","backend","ui-required","availability-impact","integrity-impact"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:45:36.113Z"}}