Topic
4 articles
CyberSecureToday covers CWE-79 across 4 articles published between 23 Sep 2026 and 18 Oct 2026.
The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity.
Stories on CWE-79 most often intersect with Stored XSS, Cross-Site Scripting and Session Hijacking, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Stored XSS on Mozilla Pontoon Localization Dashboards Enabled Administrative Account Takeover”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA stored cross-site scripting flaw in Mozilla Pontoon public dashboards allowed malicious contributor addresses to execute arbitrary code in reviewer sessions.
KubernetesSUSE Rancher CVE-2026-88804 (CVSS 9.6) lets unauthenticated attackers rewrite UI settings, plant login-page script and take over managed Kubernetes clusters.
Threat IntelCISA ICS Advisory ICSA-26-225-14 warns of a high-severity stored XSS defect in Johnson Controls Metasys building automation systems risking administrative takeover.
OT / SCADACISA warns of CVE-2026-88020 in OpenPLC Runtime v3 web interface, allowing attackers to hijack operator sessions and manipulate physical industrial processes.