CVE-2026-75170
🔶 mediumSummary
Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter.
CVSS Score
-
EPSS Score
0.2
Exploit Probability
Published Date
2026-09-04
First Seen: 2026-09-05
Last Modified
2026-09-04
Source
NVD 🔗