Stored XSS Vulnerability in Global Smart Folders Feature from Infoblox
CVE-2026-119274

4.8MEDIUM

Key Information:

Vendor

Infoblox

Status
NiOS
Vendor
CVE Published:
9 November 2026

What is CVE-2026-119274?

A stored Cross-Site Scripting (XSS) vulnerability exists in the Global Smart Folders feature of Infoblox NIOS, allowing attackers to inject a malicious script. This can result in unauthorized actions performed on behalf of users and potential data breaches if exploited successfully. Users should ensure their systems are protected and updated to mitigate risks associated with this vulnerability.

Affected Version(s)

NIOS 9.0.x

References

https://infoblox.com/

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ivan Velkov
.