VYPR

Stored-XSS-In-Tactical-RMM-1.5.2

by Kuri119

CVEs (1)

  • CVE-2026-121578MedNov 3, 2026
    risk 0.33cvss 6.1epss —

    Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browsers of users when they view content containing the infected…