CVE-2026-109558
EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview
- State
- Published
- Severity
- 8.5 High
- Published
- Oct 12, 2026
- Updated
- Oct 13, 2026
- Reserved
- Oct 12, 2026
Description
EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.7 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N | VulnCheck |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
EdgeEvertianma-if |
|
References
- GitHub Issue #533issue-tracking
- GitHub Issue #546issue-tracking
- Patch Commitpatch
- Vulnerable code in TemplatesPane.tsxtechnical-description
- https://github.com/tianma-if/edgeeverproduct
- VulnCheck Advisory: EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Previewthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.