PT-2026-65497 · Pivotick · Pivotick

Jeroen Pinoy + 1 · CVE-2026-67174 · Publicado 2026-07-28 · Atualizado 2026-07-28

Mitre

CVSS v4.0

9.2

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N

Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities.

The tryResolveHTMLElement function treated any resolved string as HTML markup by assigning it to a

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-67174

Produtos afetados

Pivotick

Referências · 2

• https://github.com/Pivotick/Pivotick/commit/67c597cdf7f6910f97a4c73905a7b845e0d039f1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-67174 · Nota de Segurança