CVE-2026-106715 | NewsBreak 26.21.0 WebView JavaScript Bridge NBJS.callNative getLoginInfo cross site scripting

November 5, 2026 Yanac

A vulnerability marked as problematic has been reported in NewsBreak 26.21.0. This affects the function NBJS.callNative of the component WebView JavaScript Bridge. The manipulation of the argument getLoginInfo leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-106715. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More