Read the docs

Netron

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Netron records in CISA KEV

No Netron vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Netron 3 records MEDIUM

Records

3 records in Netron · all components

TI-2026-55206 CVE-2026-79720 · GHSA-cc8h-gpwh-gq9r

Cross-site scripting in Netron

Priority MEDIUM 63

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00264 Published 2026-08-27 No fix listed CWE-79
TI-2026-55205 CVE-2026-79719 · GHSA-wfq7-j297-j875

Cross-site scripting in Netron

Priority MEDIUM 63

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00264 Published 2026-08-27 No fix listed CWE-79
TI-2026-55204 CVE-2026-79718 · GHSA-c4cc-9458-mw86

Cross-site scripting in Netron

Priority MEDIUM 63

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00264 Published 2026-08-27 No fix listed CWE-79
Open these records in search →