CVE-2026-8595

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A user with Editor permissions can create a dashboard where the TableNG panel includes a malicious field name. This leads to stored cross-site scripting (XSS), a vulnerability where a malicious script is permanently stored on the server and executed in the browser of any user who views the affected dashboard.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.