CVE-2026-18526 | HumHub 1.18.4/1.18.4-pl1 oEmbed cross site scripting

August 19, 2026 Yanac

A vulnerability labeled as problematic has been found in HumHub 1.18.4/1.18.4-pl1. Affected by this vulnerability is an unknown functionality of the component oEmbed. Such manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-18526. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More