Rapid7 Multiple CVEs Disclosed for JavaScript Vulnerabilities
Article Content
- •Multiple JavaScript vulnerabilities disclosed, including CVE-2026-75531 and CVE-2026-74984.
- •CVE-2026-75531 has a CVSS score of 7.0, indicating a high severity level.
- •No active exploitation or proof-of-concept code reported for these vulnerabilities.
Rapid7's Vulnerability & Exploit Database has disclosed several vulnerabilities affecting JavaScript applications. Key vulnerabilities include CVE-2026-75531, published on August 17, 2026, with a CVSS score of 7.0, and CVE-2026-74984, published on August 18, 2026, with a CVSS score of 6.8. These vulnerabilities involve improper neutralization of input during web page generation and improper privilege management, potentially allowing unauthorized access and execution of malicious scripts. Affected systems include various web applications that utilize JavaScript. As of now, there are no reports of or proof-of-concept code available for these vulnerabilities. Security professionals are advised to review their systems for these CVEs and apply necessary patches.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-13712 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the CVEs associated with these vulnerabilities?
Are these vulnerabilities actively exploited?
What should organizations do in response?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…