CVE-2026-88743

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.

Published 2026-09-15. Last modified 2026-09-22.