cveboard RSS feed

CVE-2026-55486

Critical

intranda goobi-viewer-core

  • intranda goobi-viewer-core
  • Critical
  • CVSS 9.3
  • No fixed version listed

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
intranda goobi-viewer-core>= 25.08, < 26.05None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.3 (v3.1, scored by GitHub_M)
Weakness
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'); CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
Vendor
intranda, goobi-viewer-core

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents