VULNERABILITY INTELLIGENCE
CVE-2026-13140
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-06-24
Last modified2026-10-25
Description
Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e.
Weakness classification
- 0f2be0ad-3469-4e56-b38f-4eb96719b425: CWE-79