Is CVE-2026-52606 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-52606?

CVE-2026-52606 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-52606

Description

A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a user by including a malicious payload in the loadTemplate parameter in conjunction with the execute_mode=PREPARE parameter of run.php.