Medium severity5.0OSV Advisory· Published Aug 27, 2026· Updated Sep 1, 2026
CVE-2026-79720
CVE-2026-79720
Description
Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2v9.1.2, v9.1.1, v9.1.0, …+ 1 more
- (no CPE)range: v9.1.2, v9.1.1, v9.1.0, …
- (no CPE)range: <=9.1.2
Patches
Vulnerability mechanics
References
2- github.com/lutzroeder/netron/commit/cd14bad8c9132b1aaf1d197fe61925575f194f00nvdPatch
- www.hiddenlayer.com/sai-security-advisory/2026-08-netronnvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.