CVE-2026-79294
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
Sep 18, 2026
Vendor
unknown
Description
Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component