CVE-2026-75626

Name of the Vulnerable Software and Affected Versions SpiderFoot (affected versions not specified)

Description The software fails to HTML-escape correlation titles generated from external scan data sources, such as server banners and metadata. This allows attackers to inject malicious HTML elements containing event handlers into correlation results. When an operator opens the correlations view, these scripts execute in the browser, which could lead to the theft of API keys.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.