CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer

<p>Posted by Intilangelo, Andrea on Aug 24</p>Two stored XSS vulnerabilities have been disclosed in the NethServer WebTop module, affecting versions 1.5.6 and <br /> earlier.<br /> CVE-2026-78331 (CVSS 4.0: 8.7) affects the calendar component, while CVE-2026-78332 (CVSS 4.0: 8.2) affects the <br /> contacts component.<br /> <br /> Both vulnerabilities allow malicious content to be stored and JavaS