What is CVE-2026-19110?

CVE-2026-19110 is a low-severity vulnerability in Datagear, classified under Cross-site Scripting. CVSS score: 2.4/10. Published 2026-08-06.

How severe is CVE-2026-19110?

Low severity. CVSS v3 base score is 2.4 out of 10.

RCE in Datagear

CVE-2026-19110

A vulnerability was determined in DataGear up to 5.0.0. The impacted element is the function HtmlTplDashboardWidgetHtmlRenderer of the file HtmlTplDashboardWidgetHtmlRenderer.java of the component Chart Name Handler. This manipulation of t…

Vulnerability class: XSS (Cross-Site Scripting)

CVSS v3 metric

CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N.

Affected products

N/a Datagear — versions 5.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting
CWE-94 — Code Injection

References

cna@vuldb.com (exploit)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)

Frequently asked questions

What is CVE-2026-19110?: CVE-2026-19110 is a low-severity vulnerability in Datagear, classified under Cross-site Scripting. CVSS score: 2.4/10. Published 2026-08-06.
How severe is CVE-2026-19110?: Low severity. CVSS v3 base score is 2.4 out of 10.