PT-2026-106194 · Undefined · Undefined

·

CVE-2026-95166

·

Published

2026-10-05

·

Updated

2026-10-05

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-95166

Affected Products

Undefined