High severity8.7NVD Advisory· Published Aug 24, 2026

CVE-2026-78213

Description

Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.

Affected products

Hepta Platforms/Heptabasellm-fuzzy

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-11124-b8b51-2.htmlnvd
www.twcert.org.tw/tw/cp-132-11125-9d359-1.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000