Back to the CVE list

CVE-2026-75531

Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora

CVSS score

7.0

EPSS probability

%0.4

Risk score

0.0

Published

2 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

10.0

CVE-2026-74764Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora

Vendorpandora-analysis Productpandora

Patch verifiedEPSS %12 mo ago

9.3

CVE-2026-88069Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

Vendorpandora-analysis Productpandora

Patch verifiedEPSS %01 mo ago

8.7

CVE-2026-74767Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb

Vendorpandora-analysis Productpandora

Patch verifiedEPSS %02 mo ago

6.9

CVE-2026-75529Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora

Vendorpandora-analysis Productpandora

Patch verifiedEPSS %02 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75531"