Redhotcyber

Vulnerability in Apache SkyWalking Enables XSS Attacks

First seen 27 Nov 2025, 18:34 UTC • •29.9

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A vulnerability in Apache SkyWalking has been identified, allowing attackers to execute cross-site scripting (XSS) attacks. This flaw affects users of the application performance monitoring tool, potentially compromising their data and security. The specific details of the exploit and the timeline for mitigation are currently under review.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 212d ago How this analysis works

More articles in this cluster (3)

Threat Graph

2 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Affected Platform (1)

Apache SkyWalking

Vulnerability (1)

XSS

Relationships

XSS targets Apache SkyWalking

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…