Veille CVE

Mercredi 30 septembre 2026

3 CVE

  1. CVE-2026-97265 6.5 Moyenne

    Crocoblock. Jetimpex Inc. JetEngine

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.

  2. CVE-2026-97238 5.5 Moyenne

    Crocoblock. Jetimpex Inc. JetEngine

    Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

  3. CVE-2026-97237 7.1 Élevée

    Crocoblock JetEngine

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.