CVE-2026-129358 | Linux Foundation Magma up to 1.9.0 NMS routes.ts handleReact cross site scripting

November 14, 2026 Yanac

A vulnerability was found in Linux Foundation Magma up to 1.9.0 and classified as problematic. Impacted is the function handleReact of the file nms/server/main/routes.ts of the component NMS. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-129358. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More