THREAT OPS › Threat News › [NVD] CVE-2026-90502 (LOW 3.5) — A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the att
[NVD] CVE-2026-90502 (LOW 3.5) — A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the att
CVE-2026-90502 CVSS: 3.5 LOW Published: 2026-09-13T09:16:30.827
A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used
Indicators of compromise
- CVE-2026-90502cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90502