Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
CVE-2026-54002 - Cross-site scripting (XSS) from incomplete HTML/XML sanitization in Dom::sanitize() (Kirby <= 4.9.3,5.0.0-5.4.3)
Excerpt
NetbyteSEC Security Advisory - Cross-site scripting (XSS) from incomplete HTML/XML sanitization in Dom::sanitize() (Kirby <= 4.9.3,5.0.0-5.4.3) Title : Cross-site scripting (XSS) from incomplete HTML/XML sanitization in Dom::sanitize() (Kirby <= 4.9.3,5.0.0-5.4.3) Advisory ID : NBS-2026-0001 Product : Kirby Affected Version : <= 4.9.3,5.0.0-5.4.3 CVE ID : CVE-2026-54002 Author : Shafiq Aiman | NetbyteSEC Vendor/Product Description…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-54002 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…