CVE-2026-77394 | OpenC3 COSMOS up to 7.2.x Button Widget ButtonWidget.vue cross site scripting

A vulnerability was found in OpenC3 COSMOS up to 7.2.x. It has been rated as problematic. The affected element is an unknown function of the file openc3-cosmos-init/plugins/packages/openc3-vue-common/src/widgets/ButtonWidget.vue of the component Button Widget. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-77394. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More