What is CVE-2026-40212?

CVE-2026-40212 is a medium-severity vulnerability in Openstack Skyline, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2026-04-10.

How severe is CVE-2026-40212?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Openstack Skyline

CVE-2026-40212

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Openstack Skyline — versions 0, 6.0.0, 7.0.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org
cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-40212?: CVE-2026-40212 is a medium-severity vulnerability in Openstack Skyline, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2026-04-10.
How severe is CVE-2026-40212?: Medium severity. CVSS v3 base score is 5.4 out of 10.