Skip to content

CVE-2026-27970

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
March 3, 2026
Last Seen
March 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A severe cross-site scripting (XSS) vulnerability, tracked as CVE-2026-27970, has been identified in the Angular framework's internationalization (i18n) system. This high-severity flaw allows attackers to inject malicious scripts, potentially compromising applications that utilize this framework.

Public Exploits

Checking GitHub for proof-of-concept code…