MajorCritical vulnerability

CVE-2026-105410 (CVSS 8.7)

NVD · officialPublished Oct 12, 2026Risk 37/100

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.

Technical details

CVSS

8.7

AV:NetworkAC:LowPR:LowUI:RequiredC:HighI:HighA:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source