CVE-2026-27787 in MATCHA SNS

الملخص

بحسب MITRE • 08/04/2026

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Jpcert
• حجز: 03/04/2026
• إفشاء: 08/04/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-356003
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 5.4 (CNA)
• EPSS: 0.00035
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-27787
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-27787
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-27787/