CVE-2026-13140 | Thinkst Applied Research Canarytokens Exposed AWS API cross site scripting (f5aa5c4e)

June 24, 2026 Yanac

A vulnerability has been found in Thinkst Applied Research Canarytokens and classified as problematic. Affected is an unknown function of the component Exposed AWS API. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-13140. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More