Description
Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS
Published: 2026-11-09
Score: 4.8 Medium
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://infoblox.com/ cve-icon cve-icon
History

Mon, 09 Nov 2026 16:15:00 +0000

Type Values Removed Values Added
Title Stored XSS via Improper Input Validation in Infoblox NIOS

Mon, 09 Nov 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Infoblox
Infoblox nios
Vendors & Products Infoblox
Infoblox nios

Mon, 09 Nov 2026 14:30:00 +0000

Type Values Removed Values Added
Description Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS

Mon, 09 Nov 2026 13:30:00 +0000

Type Values Removed Values Added
Description Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N'}

Subscriptions

Infoblox Nios
cve-icon MITRE

Status: PUBLISHED

Assigner: Infoblox

Published:

Updated: 2026-11-09T14:12:39.937Z

Reserved: 2026-10-29T18:33:42.678Z

Link: CVE-2026-119274

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-09T14:17:06.400

Modified: 2026-11-09T15:17:06.993

Link: CVE-2026-119274

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-09T16:00:20Z

Weaknesses
  • CWE-20

    Improper Input Validation