CVE-2026-18516
CRITICAL
NVD
CVSS Score
9.6
Severity
CRITICAL
Published
Oct 16, 2026
Vendor
unknown
Description
An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection