PT-2026-31893 · Openstack · Skyline

Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-40212

NVD

CVSS v3.1

5.4

Medium

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-40212

Affected Products

Skyline

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-40212 · Security Note
• https://openwall.com/lists/oss-security/2026/04/09/30 · Note
• https://review.opendev.org/973351 · Note
• https://bugs.launchpad.net/skyline-console/+bug/2138575 · Note
• https://twitter.com/CVEnew/status/2042561818896511047 · Twitter Post