CVE-2026-79418
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
EMX Tecnologia Gestao X 8.4 及以下版本在“帮助聊天”功能中存在一个存储型跨站脚本（XSS）漏洞。由于在生成网页时未对用户可控的输入进行适当中和处理，经过身份验证的攻击者可以在其他经过身份验证的用户上下文中执行任意 JavaScript 代码，可能导致会话劫持、账户接管以及未经授权的操作。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79418
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-79418
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79418
请登录查看更多情报信息。
Vendor Pages for CVE-2026-79418 (1)
Other References for CVE-2026-79418 (1)
Same Patch Batch · n/a · 2026-09-04 · 43 CVEs total
| CVE-2026-75430 | 9.8 CRITICAL | PowerJob Worker 5.1.2 远程代码执行漏洞 |
| CVE-2026-75431 | 9.1 CRITICAL | PowerJob Server 5.1.2 JWT密钥可预测致远程代码执行 |
| CVE-2026-85401 | 6.3 MEDIUM | Dolibarr Legacy File Manager config.inc.php access control |
| CVE-2026-79391 | Trueview 6.0.23.4 MQTT服务未认证漏洞 | |
| CVE-2021-44320 | Parrot AR.Drone 1/2 存在DoS漏洞 | |
| CVE-2026-79389 | Trueview T18161 S 6.0.23.4 MQTT消息验证漏洞 | |
| CVE-2026-75439 | Free5GC v4.2.2 UPF组件远程拒绝服务漏洞 | |
| CVE-2026-79426 | CRMEB 6.0.0 任意文件删除漏洞 | |
| CVE-2026-79423 | SeaCMS v13.6管理配置组件RCE漏洞 | |
| CVE-2022-26961 | Italtel NetMatch-S 5.0.0 多个存储型XSS漏洞 | |
| CVE-2025-67066 | oasys sysoa 1.0 /outaddresspaging SQL注入 | |
| CVE-2026-50894 | easyadmin v2.0.2.2 任意文件上传漏洞 | |
| CVE-2026-71625 | ThinkSNS+ v2.4 重置密码组件权限提升漏洞 | |
| CVE-2026-71626 | Invoice Ninja v5.13.24 远程敏感信息泄露漏洞 | |
| CVE-2026-71624 | esoTalk 1.0.0g4 远程代码执行 | |
| CVE-2026-71622 | Zhao-github APiAdmin 5.0.1 User.php 组件 SQL注入漏洞 | |
| CVE-2026-78839 | MachForm v30任意文件上传导致代码执行 | |
| CVE-2026-71620 | ApiAdmin 5.0.1 文件上传导致远程代码执行 | |
| CVE-2021-44319 | Parrot AR.Drone 1/2 无线认证拒绝服务漏洞 | |
| CVE-2026-78849 | pfSense 2.8.1及以下版本跨站脚本漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-79418
No comments yet