Is CVE-2026-66300 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-66300?

CVE-2026-66300 has a CVSS v3 severity of MEDIUM (5).

Back

CVE-2026-66300

Description

SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.