CVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in Apereo openEQUELLA up to 2026.0. This affects an unknown function of the file /api/preloginnotice/image of the component Image Upload Endpoint. Performing a manipulation of the argument Name results in cross site scripting.

This vulnerability is identified as CVE-2026-16889. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More