← Database

CVE-2026-79720

MEDIUM CVSS: 5.0 Published: 2026-08-27 Modified: 2026-09-01

Description

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

Affected Platforms

Lutzroeder Netron

Weakness Type

CWE-79

References