PT-2026-56483 · Gchq · Cyberchef

Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-57439

NVD

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts proto as a key while parsing user-supplied CSV, allowing prototype pollution that can be chained with operations such as Parse UDP to inject malicious JavaScript into HTML output. This issue is fixed in version 11.2.0.

Exploit

Correção

XSS

Prototype Pollution

Enumeração de Fraquezas

CWE-79

CWE-1321

Identificadores relacionados

CVE-2026-57439

Produtos afetados

Cyberchef

Referências · 6

• 🔥 https://github.com/gchq/CyberChef/security/advisories/GHSA-fx6f-382r-j72c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-57439 · Nota de Segurança
• https://github.com/gchq/CyberChef/pull/2569 · Nota
• https://github.com/gchq/CyberChef/releases/tag/v11.2.0 · Nota
• https://github.com/gchq/CyberChef/commit/85db3be5d0096859b810f0e8d3e151d5dc9b948f · Nota
• https://github.com/gchq/CyberChef/issues/2568 · Nota