NVD CRITICAL: CVE-2026-75626 — SpiderFoot fails to HTML-escape correlation titles built from external scan data...

Tuesday, August 18, 2026 at 11:16 AM UTC·Source: NIST NVD

Updated: Tuesday, August 18, 2026 at 12:00 PM UTC

Executive Summary

SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is opened, potentially stealing API keys.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-75626

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 18, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

FDA Weighing Possible Regs for GenAI Medical Devices

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fda-weighing-possible-regs-for-generative-ai-medical-devices-image_small-6-a-32593.jpg" align=right hspace=4>Agency Seeks Public Input on Risk-Based Oversight Approach Across Product Life Cycle The U.S. Food and Drug Administration is seeking public feedback on the varying risks and other considerations involving generat

41m agoBank Info Security

MEDIUMVulnerabilityNEW

When AI Risk Becomes a Board Liability

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/when-ai-risk-becomes-board-liability-image_small-9-a-32594.jpg" align=right hspace=4>CIOs Can Strengthen Oversight Through Reporting, Records and Insurance Reviews AI failures can trigger financial, regulatory and reputational exposure that reaches the boardroom. Reed Smith partners Carolyn Rosenberg and Andy Moss explai

41m agoBank Info Security

CRITICALVulnerability

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.

CVE-2026-19478

1h agoDark Reading