VULNERABILITY INTELLIGENCE
CVE-2026-18526
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-10-27
Description
HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation rendering workflow.
Weakness classification
- help@fluidattacks.com: CWE-79