Skip to content

CVE-2026-3295

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
October 19, 2026
Last Seen
October 19, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-3295: Cross-Site Scripting Vulnerability in IBM Cloud Pak System64.5

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 are vulnerable to cross-site scripting (CVE-2026-3295), allowing authenticated attackers to execute malicious JavaScript in users' browsers. The flaw arises from improper sanitization of user input, leading to stored XSS attacks. Although no known ex...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cross-site ScriptingIBMCVE-2023-38375CVE-2026-3161CVE-2026-4418CWE-79 - Cross-site Scripting (xss)CWE-327 - Use Of A Broken Or Risky Cryptographic AlgorithmIBM Cloud Pak SystemHTML InjectionXSS