THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-90583 (MEDIUM 4.3) — A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site

[NVD] CVE-2026-90583 (MEDIUM 4.3) — A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site

highnvdPublished 2026-09-13

CVE-2026-90583 CVSS: 4.3 MEDIUM Published: 2026-09-13T20:16:51.837

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The attack is possible to be carried out

Indicators of compromise

0ecb9c48edbf98dc7e934b54fbac43869e64b4cfsha1
00b68144e583f20a6b67e29cf01bc07f57979ffbsha1
CVE-2026-90583cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90583