{"id":"CVE-2026-109558","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-109558","generatedAt":"2026-10-28T02:58:07.935Z","title":"EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization.","description":"EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.","published":"2026-10-12T21:17:12.000Z","lastModified":"2026-10-16T19:18:45.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":8.5,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-79"],"affected":[],"epss":{"score":0.00419,"percentile":0.35935,"date":"2026-10-26","history":[{"date":"2026-10-13","score":0.0033,"percentile":0.24275}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-12T21:17:12.000Z","detail":{"score":"8.5","severity":"HIGH","publishedAt":"2026-10-12T21:17:11.940Z"},"summary":"New CVE, high severity (CVSS 8.5)."}],"references":[{"url":"https://github.com/tianma-if/edgeever","source":"disclosure@vulncheck.com"},{"url":"https://github.com/tianma-if/edgeever/blob/f6ade70423ba366077653dbb8ac43a677933c776/apps/web/src/components/TemplatesPane.tsx#L150-L158","source":"disclosure@vulncheck.com"},{"url":"https://github.com/tianma-if/edgeever/commit/6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca","source":"disclosure@vulncheck.com"},{"url":"https://github.com/tianma-if/edgeever/issues/533","source":"disclosure@vulncheck.com"},{"url":"https://github.com/tianma-if/edgeever/issues/546","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/edgeever-1.6.0-through-1.112.0-stored-xss-via-templatespane-template-preview","source":"disclosure@vulncheck.com"},{"url":"https://github.com/tianma-if/edgeever/issues/533","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-109558","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}