CVE-2026-40028

MEDIUM

5.4

Descripcion

Hayabusa versions prior to 3.8.0 contain a cross-site scripting (XSS) vulnerability in its HTML report output that allows an attacker to execute arbitrary JavaScript when a user scans JSON-exported logs containing malicious content in the Computer field. An attacker can inject JavaScript into the Computer field of JSON logs that executes in the forensic examiner's browser session when viewing the generated HTML report, leading to information disclosure or code execution.

Detalles CVE

Puntuacion CVSS v3.15.4

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado4/8/2026

Ultima modificacion4/17/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

yamato-security:hayabusa

Debilidades (CWE)

CWE-79

Referencias

https://github.com/Yamato-Security/hayabusa/releases/tag/v3.8.0(disclosure@vulncheck.com)

https://mobasi.ai/sentinel(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/hayabusa-xss-via-json-log-import(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.