CVE-2026-55486 | intranda goobi-viewer-core up to 26.4 IIIF Auth origin cross site scripting

October 23, 2026 Yanac

A vulnerability has been found in intranda goobi-viewer-core up to 26.4 and classified as problematic. This vulnerability affects unknown code of the component IIIF Auth. Performing a manipulation of the argument origin results in cross site scripting.

This vulnerability is reported as CVE-2026-55486. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More