PT-2026-5126 · Rethinkdb · Rethinkdb

59Lab · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2026-1520

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions rethinkdb versions up to 2.4.3

Description A flaw exists in rethinkdb, specifically within the Secondary Index Handler component. This issue can be exploited remotely to trigger cross site scripting. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations Update to a version beyond 2.4.3.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-1520

Produtos afetados

Rethinkdb

Referências · 8

• 🔥 https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md#poc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1520 · Nota de Segurança
• https://vuldb.com/?ctiid.343191 · Nota
• https://vuldb.com/?id.343191 · Nota
• https://twitter.com/CVEnew/status/2016524857005969612 · Publicação no Twitter
• https://t.me/CVEtracker/43158 · Publicação no Telegram
• https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md · Nota
• https://vuldb.com/?submit.738312 · Nota