CVE-2026-69662CWE-95

CVE-2026-69662

Low · published September 30, 2026

CVSS v3.1

3.7

EPSS

Percentile

7.9

In the wild

Unconfirmed

What it is

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

The record

Technical detail

CVSS v3.1: 3.7 · LOW
Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0: 2.1 · CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00187 · 7.9th percentile
Weakness: CWE-95 · Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Published: 2026-09-30T02:17Z

References (3)

EPSS history

Timeline