CVE-2026-26377

{"id": "CVE-2026-26377", "cveTags": [], "metrics": {}, "published": "2026-03-05T16:16:16.350", "references": [{"url": "https://g03m0n.github.io/", "source": "[email protected]"}, {"url": "https://g03m0n.github.io/posts/cve-2026-26377/", "source": "[email protected]"}, {"url": "https://github.com/Koha-Community/Koha", "source": "[email protected]"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function."}], "lastModified": "2026-03-05T19:38:33.877", "sourceIdentifier": "[email protected]"}