PT-2026-42780 · Rocky Linux · Rocky Linux

Ensy · CVE-2026-25681 · Published 2026-05-22 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Parsing arbitrary HTML that is subsequently rendered using the Render function can lead to the creation of an unexpected HTML tree. This behavior can be exploited to perform Cross-Site Scripting (XSS) attacks—a technique where malicious scripts are injected into trusted websites—specifically in applications that attempt to sanitize input HTML before the rendering process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

ALSA-2026:34357

ALSA-2026:34359

ALSA-2026:37123

CLEANSTART-2026-AG91746

CLEANSTART-2026-AK43046

CLEANSTART-2026-AP31842

CLEANSTART-2026-BA41349

CLEANSTART-2026-BD49035

CLEANSTART-2026-BE05060

CLEANSTART-2026-BE68531

CLEANSTART-2026-BG93699

CLEANSTART-2026-BM78291

CLEANSTART-2026-BX78383

CLEANSTART-2026-CH64198

CLEANSTART-2026-CL67452

CLEANSTART-2026-CN27900

CLEANSTART-2026-CV49545

CLEANSTART-2026-CX34942

CLEANSTART-2026-EA12165

CLEANSTART-2026-EU52554

CLEANSTART-2026-EY79095

CLEANSTART-2026-FA38569

CLEANSTART-2026-FF85222

CLEANSTART-2026-FH24210

CLEANSTART-2026-FR50160

CLEANSTART-2026-GM77447

CLEANSTART-2026-GM82388

CLEANSTART-2026-HJ99696

CLEANSTART-2026-HO16255

CLEANSTART-2026-IH16568

CLEANSTART-2026-IM39799

CLEANSTART-2026-IN26303

CLEANSTART-2026-IT06487

CLEANSTART-2026-JI51299

CLEANSTART-2026-JL47330

CLEANSTART-2026-JT15863

CLEANSTART-2026-JV11945

CLEANSTART-2026-JY65496

CLEANSTART-2026-KF61159

CLEANSTART-2026-KJ72865

CLEANSTART-2026-KJ73757

CLEANSTART-2026-KJ85611

CLEANSTART-2026-KL41807

CLEANSTART-2026-KX80654

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-MA83809

CLEANSTART-2026-MI06133

CLEANSTART-2026-MO16862

CLEANSTART-2026-MR08661

CLEANSTART-2026-MW09143

CLEANSTART-2026-MZ00063

CLEANSTART-2026-NT30039

CLEANSTART-2026-NU38786

CLEANSTART-2026-OF46770

CLEANSTART-2026-OH26633

CLEANSTART-2026-ON19155

CLEANSTART-2026-OV11554

CLEANSTART-2026-OV19069

CLEANSTART-2026-OV95289

CLEANSTART-2026-OY74734

CLEANSTART-2026-PF69993

CLEANSTART-2026-PX55932

CLEANSTART-2026-QN79037

CLEANSTART-2026-QN97697

CLEANSTART-2026-RE02723

CLEANSTART-2026-RF77222

CLEANSTART-2026-RF96040

CLEANSTART-2026-RL64341

CLEANSTART-2026-RQ86436

CLEANSTART-2026-RR10818

CLEANSTART-2026-RT07393

CLEANSTART-2026-SQ76279

CLEANSTART-2026-SW10568

CLEANSTART-2026-SY48547

CLEANSTART-2026-TF97968

CLEANSTART-2026-TO13966

CLEANSTART-2026-UC73978

CLEANSTART-2026-UK19445

CLEANSTART-2026-UR38994

CLEANSTART-2026-VD09973

CLEANSTART-2026-VD47610

CLEANSTART-2026-VE68915

CLEANSTART-2026-VN16911

CLEANSTART-2026-VO11205

CLEANSTART-2026-VX15911

CLEANSTART-2026-WA48911

CLEANSTART-2026-WE55349

CLEANSTART-2026-WF25734

CLEANSTART-2026-WK17839

CLEANSTART-2026-WK82561

CLEANSTART-2026-WS85269

CLEANSTART-2026-WU14778

CLEANSTART-2026-XC13942

CLEANSTART-2026-XK25146

CLEANSTART-2026-XV65906

CLEANSTART-2026-YG71543

CLEANSTART-2026-YK91867

CLEANSTART-2026-ZF00349

CLEANSTART-2026-ZK75486

CLEANSTART-2026-ZN46983

CLEANSTART-2026-ZW09225

CLEANSTART-2026-ZX52017

CVE-2026-25681

GO-2026-5029

OPENSUSE-SU-2026:10856-1

OPENSUSE-SU-2026:10923-1

OPENSUSE-SU-2026:10930-1

OPENSUSE-SU-2026:10933-1

OPENSUSE-SU-2026:10941-1

OPENSUSE-SU-2026:10949-1

OPENSUSE-SU-2026:11053-1

OPENSUSE-SU-2026:11126-1

OPENSUSE-SU-2026:11290-1

OPENSUSE-SU-2026:20892-1

OPENSUSE-SU-2026:20956-1

OPENSUSE-SU-2026:20963-1

OPENSUSE-SU-2026:20984-1

OPENSUSE-SU-2026:21120-1

OPENSUSE-SU-2026:21251-1

OPENSUSE-SU-2026:21262-1

OPENSUSE-SU-2026:21281-1

OPENSUSE-SU-2026:21367-1

RHSA-2026:34357

RHSA-2026:34359

RHSA-2026:35827

RHSA-2026:35828

RHSA-2026:37072

RHSA-2026:37123

RHSA-2026:42078

RHSA-2026:42079

SUSE-SU-2026:22065-1

SUSE-SU-2026:22066-1

SUSE-SU-2026:22074-1

SUSE-SU-2026:22075-1

SUSE-SU-2026:22193-1

SUSE-SU-2026:22226-1

SUSE-SU-2026:22575-1

SUSE-SU-2026:22613-1

SUSE-SU-2026:2285-1

SUSE-SU-2026:2706-1

SUSE-SU-2026:2733-1

SUSE-SU-2026:2768-1

SUSE-SU-2026:2824-1

SUSE-SU-2026:2827-1

SUSE-SU-2026:3056-1

Affected Products

Rocky Linux

References · 850

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25681.json · Exploit
• https://osv.dev/vulnerability/CLEANSTART-2026-ZK75486 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32952 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39823 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-25681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55191 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25681 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45022 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41602 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-JV11945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68119 · Security Note
• https://osv.dev/vulnerability/GO-2026-5029 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OV11554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39827 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-WA48911 · Vendor Advisory