CVE-2026-55879

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

July 11, 2026

Last Seen

July 11, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-55879: Critical XSS Vulnerability in OpenReplay Leads to Account Takeover78.0

CVE-2026-55879 is a critical vulnerability affecting OpenReplay versions 1.24.0 to 1.25.0, allowing unauthenticated attackers to execute stored XSS in the dashboard. The flaw arises from the OpenReplay tracking SDK's failure to properly encode input, enabling attackers to store malicious scripts tha...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-55879: Critical XSS Vulnerability in OpenReplay Leads to Account Takeover

Jul 11·3 sources

Related Articles (3)

CVE-2026-55879 AKAOMA CVE VULNERABILITIES / 18h OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a public project key, stores them in ClickHouse without output encoding, and later renders them in the authenticated dashboard through TextEllipsis and the event-details modal, allowing an unauthenticated attacker to store script that executes in the dashboard origin, reads

cve.akaoma.com·Jul 11

CVE-2026-55879 - OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover Latest High/Critical Vulnerabilitiy Feed / 18h CVE ID : CVE-2026-55879 Published : July 10, 2026, 9:16 p.m. 10 hours, 30 minutes ago Description : OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a public project key, stores them in ClickHouse without output encoding, and later

cvefeed.io·Jul 11

CVE-2026-55879 - Exploits & Severity

Related Entities

Cross-site Scripting Cwe-79 - Cross-site Scripting (xss)ClickHouse OpenReplay XSS