Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.
Medium CVSS 6.1
Summary
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/hekk-one/CVE
- https://hekk.one/posts/research/cve-2026-88743/
- https://hekk.one/posts/research/cve-2026-88743/
Timeline
- nvd_ingest NVD