Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain security-sensitive contexts, such as resource URLs, including URLs that define executable JavaScript scripts, '<iframe>' documents, route templates, etc. A flaw in the logic that tries to match entire UR
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b45ec4d63316900802851de538deb5f32e7f6c5b2eb88b32f0ea0842a99675c6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 19 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jbosseapxp"],"defaultStatus":"unaffected","packageName":"angular","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gjs","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"mozjs60","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"defaultStatus":"affected","packageName":"angular","product":"Red Hat Single Sign-On 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/7

{"collectionURL":"https://registry.npmjs.org","defaultStatus":"unaffected","packageName":"angular","product":"AngularJS","repo":"https://github.com/angular/angular.js","vendor":"Google","versions":[{"status":"affected","version":">=1.2.0-rc.3","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"unaffected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_fuse:7"],"defaultStatus":"unaffected","packageName":"angular","product":"Red Hat Fuse 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gjs","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"unaffected","packageName":"quay/quay-rhel9","product":"Red Hat Quay 3","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"],"defaultStatus":"unaffected","packageName":"qpid-dispatch","product":"Red Hat OpenStack Platform 16.2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/14
cwe · 2 assertions

{"cweId":"CWE-791","description":"CWE-791 Incomplete filtering of special elements","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-79","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/problemTypes/0/descriptions/0

Affected products and versions

19 source assertions
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/2
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jbosseapxp"],"defaultStatus":"unaffected","packageName":"angular","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/13
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gjs","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/9
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/11
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/4
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/8
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"mozjs60","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/6
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"defaultStatus":"affected","packageName":"angular","product":"Red Hat Single Sign-On 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/17
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"thunderbird","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/7
{"collectionURL":"https://registry.npmjs.org","defaultStatus":"unaffected","packageName":"angular","product":"AngularJS","repo":"https://github.com/angular/angular.js","vendor":"Google","versions":[{"status":"affected","version":">=1.2.0-rc.3","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"unaffected","packageName":"firefox","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/10
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"unaffected","packageName":"quay/quay-rhel8","product":"Red Hat Quay 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/15
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_fuse:7"],"defaultStatus":"unaffected","packageName":"angular","product":"Red Hat Fuse 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/12
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gjs","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:quay:3"],"defaultStatus":"unaffected","packageName":"quay/quay-rhel9","product":"Red Hat Quay 3","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/16
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"grafana","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/5
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"],"defaultStatus":"unaffected","packageName":"qpid-dispatch","product":"Red Hat OpenStack Platform 16.2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/affected/14

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/metrics/1/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

2 source assertions
{"cweId":"CWE-791","description":"CWE-791 Incomplete filtering of special elements","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-79","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/problemTypes/0/descriptions/0

Source references

6 source assertions
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-11998"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/references/0
{"name":"RHBZ#2492579","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492579"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/references/1
{"tags":["exploit","technical-description"],"url":"https://codepen.io/herodevs/pen/JobQdmz/5b3896f56fab66f20cd25e698cf3faa8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/references/1
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11998.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/1/references/2
{"tags":["third-party-advisory"],"url":"https://www.herodevs.com/vulnerability-directory/cve-2026-11998"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://www.herodevs.com/vulnerability-directory/cve-2026-11998?nes-for-angularjs"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:115ca11b95bc111482e5552385774ff30097f1a51f6ed66258455a82a3d828f3 · sha256:7be59abe8c7333e7… · /containers/adp/0/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer