CVE-2026-39642: Spabrice Nyla

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: from n/a through 1.7.

Affected products

• Spabrice Nyla: up to and including 1.7

Published 2026-05-26. Last modified 2026-07-24.