← All advisories

Unrated severityNVD Advisory· Published Oct 5, 2026

CVE-2026-95166

CVE-2026-95166

Description

In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Bacularis/Bacularisllm-fuzzy
Range: 1.0.0 - 6.5.1

Patches

Vulnerability mechanics

References

1

hekk.one/posts/research/cve-2026-95166/nvd

News mentions

0

No linked articles in our index yet.