Overview
What is CVE-2026-56858?
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
Vulnerability intelligence
CVE-2026-56858 and is rated Medium severity with a CVSS score of 6.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.