Medium severityNVD Advisory· Published Aug 27, 2026

CVE-2026-79720

Description

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lutzroeder/Netronreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=9.1.2

Patches

Vulnerability mechanics

References

github.com/lutzroeder/netron/commit/cd14bad8c9132b1aaf1d197fe61925575f194f00nvd
www.hiddenlayer.com/sai-security-advisory/2026-08-netronnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000