CVE-2026-35163 | OctoPrint up to 1.11.7/2.0.0rc2 Notification Popups terminal.js cross site scripting

August 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in OctoPrint up to 1.11.7/2.0.0rc2. This impacts an unknown function of the file src/octoprint/static/js/app/viewmodels/terminal.js of the component Notification Popups. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-35163. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More