Cross Site Scripting Vulnerability in Cairo-dock Glx-Dock Software
CVE-2026-108834

5.3MEDIUM

Key Information:

Vendor

Cairo-dock

Status
Glx-dock
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108834?

A cross site scripting vulnerability exists in Cairo-dock Glx-Dock versions up to 3.4.0, specifically within the Query Parameter Handler component located in the file ww_page.php. This vulnerability allows an attacker to manipulate the argument 'p', potentially enabling remote exploitation. As the exploit is publicly available and has been disclosed, it poses a significant threat to users of affected versions. The vendor has not responded to inquiries regarding this issue, emphasizing the need for immediate attention to secure systems against potential attacks.

Affected Version(s)

Glx-Dock 3.0

Glx-Dock 3.1

Glx-Dock 3.2

References

https://vuldb.com/vuln/416608
vdb-entrytechnical-description
https://vuldb.com/vuln/416608/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108834
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Havook (VulDB User)
VulDB CNA Team
.