CVE-2026-129427

2026-11-14

Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges

Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO

in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges