CVE-2026-106701

MEDIUM NVD

CVSS Score 6.1

Severity MEDIUM

Published Oct 15, 2026

Vendor unknown

Description

ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.