THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-79418 (HIGH 8.7) — EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the cont

[NVD] CVE-2026-79418 (HIGH 8.7) — EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the cont

mednvdPublished 2026-09-04

CVE-2026-79418 CVSS: 8.7 HIGH Published: 2026-09-04T16:18:00.103

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resultin

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-79418cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-79418