New Angular Vulnerability Allows Attackers to Execute Malicious Payloads

Gbhackers •Divya • January 13, 2026

A high Cross-Site Scripting (XSS) vulnerability has been discovered in Angular’s Template Compiler, potentially exposing millions of web applications to malicious JavaScript execution. The flaw, tracked as CVE-2026-22610, affects multiple versions of Angular’s core packages and carries a High severity rating with a CVSS score of 7.3/10. Attribute Details CVE ID CVE-2026-22610 Severity High (CVSS 4.0: 7.3/10) Vulnerability […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Angular XSS Vulnerability Allows Malicious Payload Execution A critical Cross-Site Scripting (XSS) vulnerability, tracked as CVE-2026-22610, has been identified in Angular’s Template Compiler, affecting multiple versions of Angular’s core packages. This flaw enables attackers to bypass Angular’s security measures and execute arbitrary JavaScript code in victim browsers, potentially impacting millions of web applications. 3 sources 31

Extracted Entities

New Angular Vulnerability Allows Attackers to Execute Malicious Payloads

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)