Unrated severityNVD Advisory· Published Mar 5, 2026· Updated Mar 10, 2026
CVE-2026-26377
CVE-2026-26377
Description
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.
Affected products
2- Koha/Kohadescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.