Is CVE-2026-103846 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103846?

CVE-2026-103846 has a CVSS v3 severity of HIGH (8.6).

Back

CVE-2026-103846

Description

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.