Medium severity6.1NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026
CVE-2026-121578
CVE-2026-121578
Description
Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browsers of users when they view content containing the infected objects, leading to account takeover or code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: =1.5.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.