Medium severity6.1NVD Advisory· Published Sep 4, 2026· Updated Sep 8, 2026

CVE-2026-85229

Description

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache SkyWalking Booster UI.

This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0.

Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the issue.

Affected products

Apache/Skywalkingllm-fuzzy
Range: from 10.2.0 through 10.4.0

Patches

Vulnerability mechanics

References

lists.apache.org/thread/oswo0kxr7g2jgdoz3wd923nslo36jsv8nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000