CVE-2026-92839 | Canva Desktop up to 1.124.x Deeplink cross site scripting

September 17, 2026 Yanac

A vulnerability was found in Canva Desktop up to 1.124.x. It has been rated as problematic. This affects an unknown part of the component Deeplink Handler. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-92839. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More