CVE-2026-79719

CVE-2026-79719

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

Vulnerability class: XSS (Cross-Site Scripting)

Weakness classification (CWE)

References